: patch set to update the git reference policy
PATCH 16/19 : patch set to update the git reference policy
policy/modules/system/sysnetwork.if +18 -0
@@ -215,6 +215,24 @@ interface(`sysnet_rw_dhcp_config',` ######################################## ## <summary> +## Search dhcp client state directories. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`sysnet_search_dhcpc_state',` + gen_require(` + type dhcpc_state_t; + ') + + search_dirs_pattern($1, dhcpc_state_t, dhcpc_state_t) +') + +######################################## +## <summary> ## Read dhcp client state files. ## </summary> ## <param name="domain">
PATCH 16/19 : patch set to update the git reference policy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Quoted 12 lines · Guido Trentalancia
diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/system/sysnetwork.if refpolicy-git-18012011-new/policy/modules/system/sysnetwork.if
policy/modules/system/sysnetwork.if +5
-0@@ -215,6 +215,24 @@ interface(`sysnet_rw_dhcp_config',` ######################################## ## <summary> +## Search dhcp client state directories. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access.
policy/modules/system/sysnetwork.if interface(`sysnet_rw_dhcp_config',` · line 232
Quoted 10 lines
policy/modules/system/sysnetwork.if +10
-0+## </summary> +## </param> +# +interface(`sysnet_search_dhcpc_state',` + gen_require(` + type dhcpc_state_t; + ') + + search_dirs_pattern($1, dhcpc_state_t, dhcpc_state_t) +')
You should also provide access to the location of dhcpc_state_t directories. This interface may allow access to search dhcpc_state_t directories, but it does not do any good if the caller cannot search its parent(s).
Quoted 8 lines
policy/modules/system/sysnetwork.if +3
-0+ +######################################## +## <summary> ## Read dhcp client state files. ## </summary> ## <param name="domain">
Quoted 4 lines
_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk09hRwACgkQMlxVo39jgT+z5ACeK4dDSI7i7Hb0mqPN8nT2/ONg kocAmwfOU9cj6HtyJHuHMyvrYMnAZYGg
=ZIuO
-----END PGP SIGNATURE-----
PATCH 16/19 : patch set to update the git reference policy
Quoted 20 lines · Dominick Grift
Quoted 19 lines · Guido Trentalancia
diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/system/sysnetwork.if refpolicy-git-18012011-new/policy/modules/system/sysnetwork.if
policy/modules/system/sysnetwork.if +12
-0@@ -215,6 +215,24 @@ interface(`sysnet_rw_dhcp_config',` ######################################## ## <summary> +## Search dhcp client state directories. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`sysnet_search_dhcpc_state',` + gen_require(` + type dhcpc_state_t; + ')
Quoted 8 lines
policy/modules/system/sysnetwork.if interface(`sysnet_rw_dhcp_config',` · line 232
Quoted 3 lines
policy/modules/system/sysnetwork.if +3
-0+ + search_dirs_pattern($1, dhcpc_state_t, dhcpc_state_t) +')You should also provide access to the location of
dhcpc_state_tdirectories. This interface may allow access to searchdhcpc_state_tdirectories, but it does not do any good if the caller cannot search its parent(s).
Ok, I agree and it will be done. You already pointed out for another similar interface. I had created just the minimum permissions that were actually being required.
Regards,
Guido