Skip to contentSkip to conversation

: patch set to update the git reference policy

PATCH New Guido Trentalancia 2 participants 3 messages Jan 24, 2011

lore
Share & tools
lore
#0 lore raw

PATCH 4/19 : patch set to update the git reference policy

policy/modules/apps/cpufreqselector.te +3 -0
diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/apps/cpufreqselector.te refpolicy-git-18012011-new/policy/modules/apps/cpufreqselector.te
@@ -16,6 +16,7 @@ application_domain(cpufreqselector_t, cp
 
 allow cpufreqselector_t self:capability { sys_nice sys_ptrace };
 allow cpufreqselector_t self:fifo_file rw_fifo_file_perms;
+allow cpufreqselector_t self:process getsched;
 
 files_read_etc_files(cpufreqselector_t)
 files_read_usr_files(cpufreqselector_t)
@@ -24,6 +25,8 @@ corecmd_search_bin(cpufreqselector_t)
 
 dev_rw_sysfs(cpufreqselector_t)
 
+kernel_read_system_state(cpufreqselector_t)
+
 miscfiles_read_localization(cpufreqselector_t)
 
 userdom_read_all_users_state(cpufreqselector_t)
#1 lore raw

PATCH 4/19 : patch set to update the git reference policy

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

policy/modules/apps/cpufreqselector.te application_domain(cpufreqselector_t, cp · line 19

Quoted 8 lines · Guido Trentalancia

diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/apps/cpufreqselector.te refpolicy-git-18012011-new/policy/modules/apps/cpufreqselector.te

policy/modules/apps/cpufreqselector.te +1 -0
@@ -16,6 +16,7 @@ application_domain(cpufreqselector_t, cp
 
 allow cpufreqselector_t self:capability { sys_nice sys_ptrace };
 allow cpufreqselector_t self:fifo_file rw_fifo_file_perms;
+allow cpufreqselector_t self:process getsched;

move this above the fifo_file line and below the capability line

policy/modules/apps/cpufreqselector.te corecmd_search_bin(cpufreqselector_t) · line 29

Quoted 9 lines
policy/modules/apps/cpufreqselector.te +2 -0
 files_read_etc_files(cpufreqselector_t)
 files_read_usr_files(cpufreqselector_t)
@@ -24,6 +25,8 @@ corecmd_search_bin(cpufreqselector_t)
 
 dev_rw_sysfs(cpufreqselector_t)
 
+kernel_read_system_state(cpufreqselector_t)
+

move this above files_read_etc_files() atleast

see style guide at oss.tresys.com/refpolicy (documents)

Quoted 9 lines
policy/modules/apps/cpufreqselector.te +0 -0
 miscfiles_read_localization(cpufreqselector_t)
 
 userdom_read_all_users_state(cpufreqselector_t)

_______________________________________________
refpolicy mailing list
refpolicy at oss.tresys.com
http://oss.tresys.com/mailman/listinfo/refpolicy

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk09irMACgkQMlxVo39jgT92cgCg0BcDD9quRWuzeGueYdv1b59Y Td4AoLIIsuhGzJXxGzkUmuLIkqUhQSdq
=jKwR
-----END PGP SIGNATURE-----

#2 lore raw

PATCH 4/19 : patch set to update the git reference policy

Quoted 11 lines · Dominick Grift

policy/modules/apps/cpufreqselector.te application_domain(cpufreqselector_t, cp · line 19

Quoted 8 lines · Guido Trentalancia

diff -pruN -x .git -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-18012011/policy/modules/apps/cpufreqselector.te refpolicy-git-18012011-new/policy/modules/apps/cpufreqselector.te

policy/modules/apps/cpufreqselector.te +1 -0
@@ -16,6 +16,7 @@ application_domain(cpufreqselector_t, cp
 
 allow cpufreqselector_t self:capability { sys_nice sys_ptrace };
 allow cpufreqselector_t self:fifo_file rw_fifo_file_perms;
+allow cpufreqselector_t self:process getsched;

move this above the fifo_file line and below the capability line

Ok, it will be done.

Quoted 4 lines
Quoted 4 lines
policy/modules/apps/cpufreqselector.te +0 -0
 files_read_etc_files(cpufreqselector_t)
 files_read_usr_files(cpufreqselector_t)
@@ -24,6 +25,8 @@ corecmd_search_bin(cpufreqselector_t)
 
Quoted 8 lines

policy/modules/apps/cpufreqselector.te corecmd_search_bin(cpufreqselector_t) · line 29

Quoted 4 lines
policy/modules/apps/cpufreqselector.te +2 -0
 dev_rw_sysfs(cpufreqselector_t)
 
+kernel_read_system_state(cpufreqselector_t)
+

move this above files_read_etc_files() atleast

see style guide at oss.tresys.com/refpolicy (documents)

Ok, it will be done. I was not aware of that document. I felt like there was something missing...

Regards,

Guido