Skip to contentSkip to conversation

fix cgroup_admin

PATCH New Dominick Grift 2 participants 2 messages Jun 29, 2010 – Jul 1, 2010

lore
Share & tools
lore

Dominick Grift

author
#0 lore raw

PATCH 1/1 fix cgroup_admin

When cgroup policy was merged, some changes were made. One of these changes was the renaming of the type for cgroup rules engine daemon configuration file. The cgroup_admin interface was not modified to reflect this change.

Signed-off-by Dominick Grift <[email protected]>

---
:100644 100644 a903d93... 2d1eaf3... M policy/modules/services/cgroup.if

 policy/modules/services/cgroup.if |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
policy/modules/services/cgroup.if +2 -2
index a903d93..2d1eaf3 100644
@@ -121,7 +121,7 @@ interface(`cgroup_admin',`
 	gen_require(`
 		type cgred_t, cgconfig_t, cgred_var_run_t;
 		type cgconfig_etc_t, cgconfig_initrc_exec_t, cgred_initrc_exec_t;
-		type cgred_etc_t;
+		type cgrules_etc_t;
 	')
 
 	allow $1 cgconfig_t:process { ptrace signal_perms getattr };

@@ -131,7 +131,7 @@ interface(`cgroup_admin',`
 	read_files_pattern($1, cgred_t, cgred_t)
 
 	admin_pattern($1, cgconfig_etc_t)
-	admin_pattern($1, cgred_etc_t)
+	admin_pattern($1, cgrules_etc_t)
 	files_search_etc($1)
 
 	admin_pattern($1, cgred_var_run_t)
Signature · 9 lines
1.7.0.1

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100629/8bd16d66/attachment.bin
#1 lore raw

PATCH 1/1 fix cgroup_admin

Quoted 1 line · Dominick Grift

When cgroup policy was merged, some changes were made. One of these changes was the renaming of the type for cgroup rules engine daemon configuration file. The cgroup_admin interface was not modified to reflect this change.

Merged.

Quoted 28 lines
Signed-off-by Dominick Grift<[email protected]>

---
:100644 100644 a903d93... 2d1eaf3... M policy/modules/services/cgroup.if

  policy/modules/services/cgroup.if |    4 ++--
  1 files changed, 2 insertions(+), 2 deletions(-)
policy/modules/services/cgroup.if +2 -2
index a903d93..2d1eaf3 100644
@@ -121,7 +121,7 @@ interface(`cgroup_admin',`
  	gen_require(`
  		type cgred_t, cgconfig_t, cgred_var_run_t;
  		type cgconfig_etc_t, cgconfig_initrc_exec_t, cgred_initrc_exec_t;
-		type cgred_etc_t;
+		type cgrules_etc_t;
  	')
 
  	allow $1 cgconfig_t:process { ptrace signal_perms getattr };

@@ -131,7 +131,7 @@ interface(`cgroup_admin',`
  	read_files_pattern($1, cgred_t, cgred_t)
 
  	admin_pattern($1, cgconfig_etc_t)
-	admin_pattern($1, cgred_etc_t)
+	admin_pattern($1, cgrules_etc_t)
  	files_search_etc($1)
 
  	admin_pattern($1, cgred_var_run_t)
Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com