irc.te: Allow irssi to re-execute itself
PATCH 1/1 irc.te: Allow irssi to re-execute itself
--- irc.te | 3 +++ 1 file changed, 3 insertions(+)
irc.te +3 -0
@@ -70,6 +70,9 @@ files_tmp_filetrans(irc_t, irc_tmp_t, { file dir lnk_file sock_file fifo_file }) kernel_read_system_state(irc_t) +can_exec(irc_t, irc_exec_t) +corecmd_search_bin(irc_t) + corenet_all_recvfrom_unlabeled(irc_t) corenet_all_recvfrom_netlabel(irc_t) corenet_tcp_sendrecv_generic_if(irc_t)
Signature · 1 line
2.0.4
PATCH 1/1 irc.te: Allow irssi to re-execute itself
I couldn't figure out how that file is supposed to be ordered (definitly not alphabetical), therefore I'm not sure if I inserted the two directives at the right place.
Regards,
Luis Ressel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20140812/73eef408/attachment.bin
PATCH 1/1 irc.te: Allow irssi to re-execute itself
In reply to Luis ResselQuoted 9 lines · Luis Ressel
--- irc.te | 3 +++ 1 file changed, 3 insertions(+)irc.te +0
-0
irc.te files_tmp_filetrans(irc_t, irc_tmp_t, { file dir lnk_file sock_file fifo_file }) · line 78
Quoted 9 lines
irc.te +3
-0@@ -70,6 +70,9 @@ files_tmp_filetrans(irc_t, irc_tmp_t, { file dir lnk_file sock_file fifo_file }) kernel_read_system_state(irc_t) +can_exec(irc_t, irc_exec_t) +corecmd_search_bin(irc_t) + corenet_all_recvfrom_unlabeled(irc_t) corenet_all_recvfrom_netlabel(irc_t) corenet_tcp_sendrecv_generic_if(irc_t)
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com