Skip to contentSkip to conversation

: patch to add needed permissions to the authlogin module

PATCH New Guido Trentalancia 2 participants 2 messages Feb 16, 2011 – Feb 28, 2011

lore
Share & tools
lore

Guido Trentalancia

author
#0 lore raw

PATCH 23/34 : patch to add needed permissions to the authlogin module

This patch adds some needed permissions to the chkpwd_t domain in policy/modules/system/authlogin.te.

policy/modules/system/authlogin.te +3 -1
@@ -83,11 +83,13 @@ logging_log_file(wtmp_t)
 
 allow chkpwd_t self:capability { dac_override setuid };
 dontaudit chkpwd_t self:capability sys_tty_config;
-allow chkpwd_t self:process getattr;
+allow chkpwd_t self:process { getattr signal };
 
 allow chkpwd_t shadow_t:file read_file_perms;
 files_list_etc(chkpwd_t)
 
+kernel_read_crypto_sysctls(chkpwd_t)
+
 # is_selinux_enabled
 kernel_read_system_state(chkpwd_t)
#1 lore raw

PATCH 23/34 : patch to add needed permissions to the authlogin module

Quoted 9 lines · Guido Trentalancia

This patch adds some needed permissions to the chkpwd_t domain in policy/modules/system/authlogin.te.

policy/modules/system/authlogin.te +0 -0
@@ -83,11 +83,13 @@ logging_log_file(wtmp_t)
 
 allow chkpwd_t self:capability { dac_override setuid };
 dontaudit chkpwd_t self:capability sys_tty_config;

policy/modules/system/authlogin.te logging_log_file(wtmp_t) · line 94

Quoted 10 lines
policy/modules/system/authlogin.te +3 -1
-allow chkpwd_t self:process getattr;
+allow chkpwd_t self:process { getattr signal };
 
 allow chkpwd_t shadow_t:file read_file_perms;
 files_list_etc(chkpwd_t)
 
+kernel_read_crypto_sysctls(chkpwd_t)
+
 # is_selinux_enabled
 kernel_read_system_state(chkpwd_t)

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com