Skip to contentSkip to conversation

: patch to allow plymouthd getsched permission

PATCH New Guido Trentalancia 2 participants 2 messages Feb 16, 2011 – Feb 23, 2011

lore
Share & tools
lore
#0 lore raw

PATCH 16/34 : patch to allow plymouthd getsched permission

This patch adds a self:process getsched permission for plymouthd_t.

policy/modules/services/plymouthd.te +1 -1
diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/services/plymouthd.te refpolicy-git-02022011-new/policy/modules/services/plymouthd.te
@@ -29,7 +29,7 @@ files_pid_file(plymouthd_var_run_t)
 
 allow plymouthd_t self:capability { sys_admin sys_tty_config };
 dontaudit plymouthd_t self:capability dac_override;
-allow plymouthd_t self:process signal;
+allow plymouthd_t self:process { signal getsched };
 allow plymouthd_t self:fifo_file rw_fifo_file_perms;
 allow plymouthd_t self:unix_stream_socket create_stream_socket_perms;
 
#1 lore raw

PATCH 16/34 : patch to allow plymouthd getsched permission

policy/modules/services/plymouthd.te files_pid_file(plymouthd_var_run_t) · line 34

Quoted 13 lines · Guido Trentalancia

This patch adds a self:process getsched permission for plymouthd_t.

diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/services/plymouthd.te refpolicy-git-02022011-new/policy/modules/services/plymouthd.te

policy/modules/services/plymouthd.te +1 -1
@@ -29,7 +29,7 @@ files_pid_file(plymouthd_var_run_t)
 
 allow plymouthd_t self:capability { sys_admin sys_tty_config };
 dontaudit plymouthd_t self:capability dac_override;
-allow plymouthd_t self:process signal;
+allow plymouthd_t self:process { signal getsched };
 allow plymouthd_t self:fifo_file rw_fifo_file_perms;
 allow plymouthd_t self:unix_stream_socket create_stream_socket_perms;

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com