Changeset 2638

Show
Ignore:
Timestamp:
03/14/08 09:55:34 (9 months ago)
Author:
pebenito
Message:

trunk: a pair of tweaks from gentoo systems.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/policy/modules/kernel/selinux.te

    r2553 r2638  
    11 
    2 policy_module(selinux,1.5.0) 
     2policy_module(selinux,1.5.1) 
    33 
    44######################################## 
    …… 
    2222sid security gen_context(system_u:object_r:security_t,mls_systemhigh) 
    2323genfscon selinuxfs / gen_context(system_u:object_r:security_t,s0) 
     24genfscon securityfs / gen_context(system_u:object_r:security_t,s0) 
    2425 
    2526neverallow ~{ selinux_unconfined_type can_load_policy } security_t:security load_policy; 

  • trunk/policy/modules/system/getty.te

    r2612 r2638  
    11 
    2 policy_module(getty,1.5.1) 
     2policy_module(getty,1.5.2) 
    33 
    44######################################## 
    …… 
    104104        # Gentoo default /etc/issue makes agetty 
    105105        # do a DNS lookup for the hostname 
    106         dontaudit getty_t self:udp_socket create_socket_perms; 
    107  
    108         corenet_dontaudit_all_recvfrom_unlabeled(getty_t) 
    109         corenet_dontaudit_udp_sendrecv_generic_if(getty_t) 
    110         corenet_dontaudit_udp_sendrecv_all_nodes(getty_t) 
    111         corenet_dontaudit_udp_sendrecv_dns_port(getty_t) 
    112         corenet_dontaudit_sendrecv_dns_client_packets(getty_t) 
    113  
    114         sysnet_dontaudit_read_config(getty_t) 
     106        sysnet_dns_name_resolve(getty_t) 
    115107') 
    116108