Recent lvm utilities now use setfscreate
PATCH 1/1 Recent lvm utilities now use setfscreate
Signed-off-by Sven Vermeulen <[email protected]>
--- policy/modules/system/lvm.te | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
policy/modules/system/lvm.te +1 -1
@@ -167,7 +167,7 @@ optional_policy(` # net_admin for multipath allow lvm_t self:capability { dac_override fowner ipc_lock sys_admin sys_nice mknod chown sys_resource sys_rawio net_admin }; dontaudit lvm_t self:capability sys_tty_config; -allow lvm_t self:process { sigchld sigkill sigstop signull signal }; +allow lvm_t self:process { sigchld sigkill sigstop signull signal setfscreate }; # LVM will complain a lot if it cannot set its priority. allow lvm_t self:process setsched; allow lvm_t self:file rw_file_perms;
Signature · 1 line
1.7.3.4
PATCH 1/1 Recent lvm utilities now use setfscreate
Quoted 10 lines · Sven Vermeulen
Signed-off-by Sven Vermeulen <[email protected]>--- policy/modules/system/lvm.te | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)policy/modules/system/lvm.te +0
-0
policy/modules/system/lvm.te optional_policy(` · line 173
Quoted 8 lines
policy/modules/system/lvm.te +1
-1@@ -167,7 +167,7 @@ optional_policy(` # net_admin for multipath allow lvm_t self:capability { dac_override fowner ipc_lock sys_admin sys_nice mknod chown sys_resource sys_rawio net_admin }; dontaudit lvm_t self:capability sys_tty_config; -allow lvm_t self:process { sigchld sigkill sigstop signull signal }; +allow lvm_t self:process { sigchld sigkill sigstop signull signal setfscreate }; # LVM will complain a lot if it cannot set its priority. allow lvm_t self:process setsched; allow lvm_t self:file rw_file_perms;
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com