Skip to contentSkip to conversation

Allow authdaemon to create unix_stream_sockets

PATCH New Sven Vermeulen 2 participants 2 messages Mar 9, 2011 – Mar 22, 2011

lore
Share & tools
lore

Sven Vermeulen

author
#0 lore raw

PATCH 2/15 Allow authdaemon to create unix_stream_sockets

The authdaemon needs the create_stream_socket_perms privs in order to be able to start up.

Signed-off-by Sven Vermeulen <[email protected]>
---
 policy/modules/services/courier.te |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
policy/modules/services/courier.te +1 -1
index 2802dbb..55d64bc 100644
@@ -37,7 +37,7 @@ typealias courier_sqwebmail_exec_t alias sqwebmail_cron_exec_t;
 #
 
 allow courier_authdaemon_t self:capability { setuid setgid sys_tty_config };
-allow courier_authdaemon_t self:unix_stream_socket connectto;
+allow courier_authdaemon_t self:unix_stream_socket { create_stream_socket_perms connectto };
 
 can_exec(courier_authdaemon_t, courier_exec_t)
Signature · 1 line
1.7.3.4
#1 lore raw

PATCH 2/15 Allow authdaemon to create unix_stream_sockets

Quoted 12 lines · Sven Vermeulen

The authdaemon needs the create_stream_socket_perms privs in order to be able to start up.

Signed-off-by Sven Vermeulen <[email protected]>
---
 policy/modules/services/courier.te |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
policy/modules/services/courier.te +0 -0
index 2802dbb..55d64bc 100644

policy/modules/services/courier.te typealias courier_sqwebmail_exec_t alias sqwebmail_cron_exec_t; · line 42

Quoted 7 lines
policy/modules/services/courier.te +1 -1
@@ -37,7 +37,7 @@ typealias courier_sqwebmail_exec_t alias sqwebmail_cron_exec_t;
 #
 
 allow courier_authdaemon_t self:capability { setuid setgid sys_tty_config };
-allow courier_authdaemon_t self:unix_stream_socket connectto;
+allow courier_authdaemon_t self:unix_stream_socket { create_stream_socket_perms connectto };
 
 can_exec(courier_authdaemon_t, courier_exec_t)

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com