Skip to contentSkip to conversation

Expand selinux and usermanage role attributes to include proper type definitions

PATCH New Sven Vermeulen 2 participants 2 messages May 1, 2012 – May 4, 2012

lore
Share & tools
lore

Sven Vermeulen

author
#0 lore raw

PATCH 1/1 Expand selinux and usermanage role attributes to include proper type definitions

Signed-off-by Sven Vermeulen <[email protected]>
---
 policy/modules/admin/usermanage.te   |    3 +++
 policy/modules/system/selinuxutil.te |    2 ++
 2 files changed, 5 insertions(+), 0 deletions(-)
policy/modules/admin/usermanage.te +3 -0
index 3e144b9..8603832 100644
@@ -6,9 +6,11 @@ policy_module(usermanage, 1.17.1)
 #
 
 attribute_role chfn_roles;
+role chfn_roles types chfn_t;
 role system_r types chfn_t;
 
 attribute_role groupadd_roles;
+role groupadd_roles types groupadd_t;
 
 attribute_role passwd_roles;
 roleattribute system_r passwd_roles;

@@ -17,6 +19,7 @@ attribute_role sysadm_passwd_roles;
 roleattribute system_r sysadm_passwd_roles;
 
 attribute_role useradd_roles;
+role useradd_roles types useradd_t;
 
 type admin_passwd_exec_t;
 files_type(admin_passwd_exec_t)
policy/modules/system/selinuxutil.te +2 -0
index ab78aea..bbf76e3 100644
@@ -13,8 +13,10 @@ attribute can_write_binary_policy;
 attribute can_relabelto_binary_policy;
 
 attribute_role newrole_roles;
+role newrole_roles types newrole_t;
 
 attribute_role run_init_roles;
+role run_init_roles types run_init_t;
 role system_r types run_init_t;
 
 attribute_role semanage_roles;
Signature · 1 line
1.7.3.4
#1 lore raw

PATCH 1/1 Expand selinux and usermanage role attributes to include proper type definitions

Quoted 35 lines · Sven Vermeulen
Signed-off-by Sven Vermeulen <[email protected]>
---
 policy/modules/admin/usermanage.te   |    3 +++
 policy/modules/system/selinuxutil.te |    2 ++
 2 files changed, 5 insertions(+), 0 deletions(-)
policy/modules/admin/usermanage.te +3 -0
index 3e144b9..8603832 100644
@@ -6,9 +6,11 @@ policy_module(usermanage, 1.17.1)
 #
 
 attribute_role chfn_roles;
+role chfn_roles types chfn_t;
 role system_r types chfn_t;
 
 attribute_role groupadd_roles;
+role groupadd_roles types groupadd_t;
 
 attribute_role passwd_roles;
 roleattribute system_r passwd_roles;

@@ -17,6 +19,7 @@ attribute_role sysadm_passwd_roles;
 roleattribute system_r sysadm_passwd_roles;
 
 attribute_role useradd_roles;
+role useradd_roles types useradd_t;
 
 type admin_passwd_exec_t;
 files_type(admin_passwd_exec_t)
policy/modules/system/selinuxutil.te +0 -0
index ab78aea..bbf76e3 100644

policy/modules/system/selinuxutil.te attribute can_write_binary_policy; · line 22

Quoted 10 lines
policy/modules/system/selinuxutil.te +2 -0
@@ -13,8 +13,10 @@ attribute can_write_binary_policy;
 attribute can_relabelto_binary_policy;
 
 attribute_role newrole_roles;
+role newrole_roles types newrole_t;
 
 attribute_role run_init_roles;
+role run_init_roles types run_init_t;
 role system_r types run_init_t;
 
 attribute_role semanage_roles;

Not necessary, these lines are already in the policy.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com