Navigation

← Previous Changeset
Next Changeset →

Changeset 2695

Timestamp:

05/23/08 13:22:57 (6 months ago)

Author:

pebenito

Message:

trunk: start adding open perm to obvious places.

Files:

trunk/policy/modules/admin/amanda.te (modified) (1 diff)
trunk/policy/modules/services/gpm.te (modified) (1 diff)
trunk/policy/support/obj_perm_sets.spt (modified) (5 diffs)

Legend:

: Unmodified
: Added
: Removed
: Modified
: Copied
: Moved

trunk/policy/modules/admin/amanda.te

r2668	r2695
95	95	allow amanda_t amanda_gnutarlists_t:dir rw_dir_perms;
96	96	allow amanda_t amanda_gnutarlists_t:file manage_file_perms;
97		allow amanda_t amanda_gnutarlists_t:lnk_file manage_file_perms;
	97	allow amanda_t amanda_gnutarlists_t:lnk_file manage_lnk_file_perms;
98	98
99	99	manage_dirs_pattern(amanda_t,amanda_var_lib_t,amanda_var_lib_t)

trunk/policy/modules/services/gpm.te

r2668	r2695
42	42	files_pid_filetrans(gpm_t,gpm_var_run_t,file)
43	43
44		allow gpm_t gpmctl_t:sock_file manage_file_perms;
45		allow gpm_t gpmctl_t:fifo_file manage_file_perms;
	44	allow gpm_t gpmctl_t:sock_file manage_sock_file_perms;
	45	allow gpm_t gpmctl_t:fifo_file manage_fifo_file_perms;
46	46	dev_filetrans(gpm_t,gpmctl_t,{ sock_file fifo_file })
47	47

trunk/policy/support/obj_perm_sets.spt

r2690	r2695
194	194	define(`rename_dir_perms',`{ getattr rename }')
195	195	define(`delete_dir_perms',`{ getattr rmdir }')
196		define(`manage_dir_perms',`{ create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl }')
	196	define(`manage_dir_perms',`{ create open getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl }')
197	197	define(`relabelfrom_dir_perms',`{ getattr relabelfrom }')
198	198	define(`relabelto_dir_perms',`{ getattr relabelto }')
…	…
210	210	define(`write_file_perms',`{ getattr write append lock ioctl }')
211	211	define(`rw_file_perms',`{ getattr read write append ioctl lock }')
212		define(`create_file_perms',`{ getattr create }')
	212	define(`create_file_perms',`{ getattr create open }')
213	213	define(`rename_file_perms',`{ getattr rename }')
214	214	define(`delete_file_perms',`{ getattr unlink }')
215		define(`manage_file_perms',`{ create getattr setattr read write append rename link unlink ioctl lock }')
	215	define(`manage_file_perms',`{ create open getattr setattr read write append rename link unlink ioctl lock }')
216	216	define(`relabelfrom_file_perms',`{ getattr relabelfrom }')
217	217	define(`relabelto_file_perms',`{ getattr relabelto }')
…	…
244	244	define(`write_fifo_file_perms',`{ getattr write append lock ioctl }')
245	245	define(`rw_fifo_file_perms',`{ getattr read write append ioctl lock }')
246		define(`create_fifo_file_perms',`{ getattr create }')
	246	define(`create_fifo_file_perms',`{ getattr create open }')
247	247	define(`rename_fifo_file_perms',`{ getattr rename }')
248	248	define(`delete_fifo_file_perms',`{ getattr unlink }')
249		define(`manage_fifo_file_perms',`{ create getattr setattr read write append rename link unlink ioctl lock }')
	249	define(`manage_fifo_file_perms',`{ create open getattr setattr read write append rename link unlink ioctl lock }')
250	250	define(`relabelfrom_fifo_file_perms',`{ getattr relabelfrom }')
251	251	define(`relabelto_fifo_file_perms',`{ getattr relabelto }')
…	…
280	280	define(`rename_blk_file_perms',`{ getattr rename }')
281	281	define(`delete_blk_file_perms',`{ getattr unlink }')
282		define(`manage_blk_file_perms',`{ create getattr setattr read write append rename link unlink ioctl lock }')
	282	define(`manage_blk_file_perms',`{ create open getattr setattr read write append rename link unlink ioctl lock }')
283	283	define(`relabelfrom_blk_file_perms',`{ getattr relabelfrom }')
284	284	define(`relabelto_blk_file_perms',`{ getattr relabelto }')
…	…
297	297	define(`rename_chr_file_perms',`{ getattr rename }')
298	298	define(`delete_chr_file_perms',`{ getattr unlink }')
299		define(`manage_chr_file_perms',`{ create getattr setattr read write append rename link unlink ioctl lock }')
	299	define(`manage_chr_file_perms',`{ create open getattr setattr read write append rename link unlink ioctl lock }')
300	300	define(`relabelfrom_chr_file_perms',`{ getattr relabelfrom }')
301	301	define(`relabelto_chr_file_perms',`{ getattr relabelto }')

Download in other formats:

Unified Diff
Zip Disabled

* Generating other formats may take time.