Attachment 310859 Details for Bug 453844 – Fix selinux policy wrt ipa_kpasswd

[patch] Fix selinux policy wrt ipa_kpasswd

0001-After-the-rework-of-the-code-that-binds-to-specific.patch (text/plain), 1.17 KB, created by Simo Sorce on 2008-07-02 22:02:45 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Simo Sorce

Created: 2008-07-02 22:02:45 UTC

Size: 1.17 KB

patch

obsolete

>>From 3ba40d92a72bc972c85c0af797fa6d5a8c735127 Mon Sep 17 00:00:00 2001
>From: Simo Sorce <ssorce@redhat.com>
>Date: Wed, 2 Jul 2008 17:55:18 -0400
>Subject: [PATCH] After the rework of the code that binds to specific interfaces to
> correctly support multihomed server, we need to add a couple of
> SELinux lines to the policy file. (lines suggested by Dan Walsh)
>
>---
> ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te |    3 +++
> 1 files changed, 3 insertions(+), 0 deletions(-)
>
>diff --git a/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te b/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te
>index 55e65cc..b5203a4 100644
>--- a/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te
>+++ b/ipa-server/selinux/ipa_kpasswd/ipa_kpasswd.te
>@@ -48,6 +48,9 @@ manage_dirs_pattern(ipa_kpasswd_t, ipa_kpasswd_ccache_t, ipa_kpasswd_ccache_t)
> manage_files_pattern(ipa_kpasswd_t, ipa_kpasswd_ccache_t, ipa_kpasswd_ccache_t)
> files_var_filetrans(ipa_kpasswd_t, ipa_kpasswd_ccache_t,dir)
> 
>+kernel_read_network_state(ipa_kpasswd_t)
>+kernel_read_network_state_symlinks(ipa_kpasswd_t)
>+
> corenet_tcp_sendrecv_all_if(ipa_kpasswd_t)
> corenet_udp_sendrecv_all_if(ipa_kpasswd_t)
> corenet_raw_sendrecv_all_if(ipa_kpasswd_t)
>-- 
>1.5.5.1
>

Actions: View | Diff

Attachments on bug 453844: 310859