Skip to contentSkip to conversation

: patch set to update the git reference policy

PATCH New Guido Trentalancia 2 participants 3 messages Jan 24, 2011

lore
Share & tools
lore

Guido Trentalancia

author
#0 lore raw

PATCH 18/19 : patch set to update the git reference policy

policy/modules/services/consolekit.if +1 -0
diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/services/consolekit.if refpolicy-git-18012011-new/policy/modules/services/consolekit.if
@@ -93,5 +113,6 @@ interface(`consolekit_read_pid_files',`
 	')
 
 	files_search_pids($1)
+	allow $1 consolekit_var_run_t:dir list_dir_perms;
 	read_files_pattern($1, consolekit_var_run_t, consolekit_var_run_t)
 ')
policy/modules/services/consolekit.te +4 -0
diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/services/consolekit.te refpolicy-git-18012011-new/policy/modules/services/consolekit.te
@@ -118,6 +118,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	shutdown_getattr_exec_files(consolekit_t)
+')
+
+optional_policy(`
 	udev_domtrans(consolekit_t)
 	udev_read_db(consolekit_t)
 	udev_signal(consolekit_t)
#1 lore raw

PATCH 18/19 : patch set to update the git reference policy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

policy/modules/services/consolekit.if interface(`consolekit_read_pid_files',` · line 116

Quoted 8 lines · Guido Trentalancia

diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/services/consolekit.if refpolicy-git-18012011-new/policy/modules/services/consolekit.if

policy/modules/services/consolekit.if +1 -0
@@ -93,5 +113,6 @@ interface(`consolekit_read_pid_files',`
 	')
 
 	files_search_pids($1)
+	allow $1 consolekit_var_run_t:dir list_dir_perms;

listing consolekit_var_run_t directories is not strictly required to "consolekit_read_pid_files", i would create a new interface:
consolekit_list_pids() instead.

Quoted 18 lines
policy/modules/services/consolekit.if +0 -0
 	read_files_pattern($1, consolekit_var_run_t, consolekit_var_run_t)
 ')

diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/services/consolekit.te refpolicy-git-18012011-new/policy/modules/services/consolekit.te

policy/modules/services/consolekit.te +4 -0
@@ -118,6 +118,10 @@ optional_policy(`
 ')
 
 optional_policy(`
+	shutdown_getattr_exec_files(consolekit_t)
+')
+
+optional_policy(`
 	udev_domtrans(consolekit_t)
 	udev_read_db(consolekit_t)
 	udev_signal(consolekit_t)
Quoted 4 lines

_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk09hKwACgkQMlxVo39jgT9HHACeJgMEO6Y7A3hWgZKiuLRsbFOR W6gAnjLDosNZFwgz+ULFHoY9PI7YSgza
=SZt+
-----END PGP SIGNATURE-----

author
#2 lore raw

PATCH 18/19 : patch set to update the git reference policy

Quoted 7 lines · Dominick Grift
Quoted 6 lines · Guido Trentalancia

diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/services/consolekit.if refpolicy-git-18012011-new/policy/modules/services/consolekit.if

policy/modules/services/consolekit.if +0 -0
@@ -93,5 +113,6 @@ interface(`consolekit_read_pid_files',`
 	')
Quoted 6 lines

policy/modules/services/consolekit.if interface(`consolekit_read_pid_files',` · line 116

Quoted 2 lines
policy/modules/services/consolekit.if +1 -0
 	files_search_pids($1)
+	allow $1 consolekit_var_run_t:dir list_dir_perms;

listing consolekit_var_run_t directories is not strictly required to "consolekit_read_pid_files", i would create a new interface:
consolekit_list_pids() instead.

Ok, it will be changed accordingly.

Regards,

Guido