Make inetd_tcp_service_domain optional
PATCH 1/1 Make inetd_tcp_service_domain optional
The uwimap application does not require inetd to be running or even available on the system. Since inetd is not mandatory, it is not considered part of the base policy, so its call should be optional.
Signed-off-by Sven Vermeulen <[email protected]>
--- uwimap.te | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-)
uwimap.te +4 -1
@@ -8,7 +8,6 @@ policy_module(uwimap, 1.8.0) type imapd_t; type imapd_exec_t; init_daemon_domain(imapd_t, imapd_exec_t) -inetd_tcp_service_domain(imapd_t, imapd_exec_t) type imapd_tmp_t; files_tmp_file(imapd_tmp_t)
@@ -83,6 +82,10 @@ userdom_user_home_dir_filetrans_user_home_content(imapd_t, { dir file lnk_file f mta_rw_spool(imapd_t) optional_policy(` + inetd_tcp_service_domain(imapd_t, imapd_exec_t) +') + +optional_policy(` seutil_sigchld_newrole(imapd_t) ')
Signature · 1 line
1.7.3.4
PATCH 1/1 Make inetd_tcp_service_domain optional
Quoted 3 lines · Sven Vermeulen
The uwimap application does not require inetd to be running or even available on the system. Since inetd is not mandatory, it is not considered part of the base policy, so its call should be optional.
Merged.
Quoted 28 lines
Signed-off-by Sven Vermeulen <[email protected]>--- uwimap.te | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-)uwimap.te +4
-1@@ -8,7 +8,6 @@ policy_module(uwimap, 1.8.0) type imapd_t; type imapd_exec_t; init_daemon_domain(imapd_t, imapd_exec_t) -inetd_tcp_service_domain(imapd_t, imapd_exec_t) type imapd_tmp_t; files_tmp_file(imapd_tmp_t)@@ -83,6 +82,10 @@ userdom_user_home_dir_filetrans_user_home_content(imapd_t, { dir file lnk_file f mta_rw_spool(imapd_t) optional_policy(` + inetd_tcp_service_domain(imapd_t, imapd_exec_t) +') + +optional_policy(` seutil_sigchld_newrole(imapd_t) ')
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com