: patch to allow the execution of bin_t files from the dbus module

PATCH New Guido Trentalancia 1 participant 1 message Feb 16, 2011

Share & tools

Guido Trentalancia

author

2011-02-16 06:41 UTC #0 lore raw

PATCH 31/34 : patch to allow the execution of bin_t files from the dbus module

This patch allows corecmd_exec_bin from the dbus module. This is required to run python from dbus-daemon-launch-helper. It might also required to run other packages from dbus, for example, packages that do not have a refpolicy module yet and are labeled generically bin_t.

policy/modules/services/dbus.te +1 -0

diff -pruN refpolicy-git-15022011-test/policy/modules/services/dbus.te refpolicy-git-15022011-test-new/policy/modules/services/dbus.te
@@ -108,6 +108,7 @@ term_dontaudit_use_console(system_dbusd_
 auth_use_nsswitch(system_dbusd_t)
 auth_read_pam_console_data(system_dbusd_t)
 
+corecmd_exec_bin(system_dbusd_t)
 corecmd_list_bin(system_dbusd_t)
 corecmd_read_bin_pipes(system_dbusd_t)
 corecmd_read_bin_sockets(system_dbusd_t)