Skip to contentSkip to conversation

Allow puppet to mount partitions

PATCH New Sven Vermeulen 2 participants 2 messages Aug 24, 2011 – Aug 25, 2011

lore
Share & tools
lore
#0 lore raw

PATCH v2 1/1 Allow puppet to mount partitions

Puppet is a management utility to manage several dozens or even hundreds of systems through a single application. Part of its job is to ensure that the configuration and state of a system is as expected. Part of this is to ensure that the proper mounts are available and, if not, mount them (or umount them).

This patch allows puppet_t to call mount.

---
 policy/modules/services/puppet.te |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)
policy/modules/services/puppet.te +2 -0
index c11bf51..4d3f9e3 100644
@@ -125,6 +125,8 @@ logging_send_syslog_msg(puppet_t)
 miscfiles_read_hwdata(puppet_t)
 miscfiles_read_localization(puppet_t)
 
+mount_domtrans(puppet_t)
+
 seutil_domtrans_setfiles(puppet_t)
 seutil_domtrans_semanage(puppet_t)
 
Signature · 1 line
1.7.3.4
#1 lore raw

PATCH v2 1/1 Allow puppet to mount partitions

Quoted 6 lines · Sven Vermeulen

Puppet is a management utility to manage several dozens or even hundreds of systems through a single application. Part of its job is to ensure that the configuration and state of a system is as expected. Part of this is to ensure that the proper mounts are available and, if not, mount them (or umount them).

This patch allows puppet_t to call mount.

Merged.

Quoted 18 lines
---
 policy/modules/services/puppet.te |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)
policy/modules/services/puppet.te +2 -0
index c11bf51..4d3f9e3 100644
@@ -125,6 +125,8 @@ logging_send_syslog_msg(puppet_t)
 miscfiles_read_hwdata(puppet_t)
 miscfiles_read_localization(puppet_t)
 
+mount_domtrans(puppet_t)
+
 seutil_domtrans_setfiles(puppet_t)
 seutil_domtrans_semanage(puppet_t)
 
Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com