Changeset 84 for selinux

Timestamp:

Jan 19, 2007, 4:11:02 PM (17 years ago)

Author:

presbrey

Message:

preliminary zephyr support

Location:

selinux/build

Files:

• misc.te (modified) (5 diffs)
• zephyr.fc (added)
• zephyr.if (added)
• zephyr.te (added)

selinux/build/misc.te

@@ -8 +8 @@
 
 afs_access(user_t);
+zephyr_access(user_t);
 
 ### AFS ###
@@ -16 +17 @@
 
 afs_access(kernel_t);
+zephyr_access(kernel_t);
 
 # init.d script sets up cell files:
@@ -26 +28 @@
 require {
         type crond_t, user_cron_spool_t;
+        type system_crond_t;
+        type var_log_t;
 };
 
@@ -39 +43 @@
 allow user_t crond_t:fifo_file rw_file_perms;
 allow user_t crond_t:process sigchld;
+allow system_crond_t var_log_t:file rw_file_perms;
 
 ### SSH ###
@@ -60 +65 @@
 afs_access(procmail_t);
 mta_sendmail_exec(user_t)
+mta_sendmail_exec(system_crond_t)
 can_exec(user_t, sendmail_exec_t)
+can_exec(system_crond_t, sendmail_exec_t)
 allow sendmail_t postfix_local_t:fd use;
 allow sendmail_t postfix_local_t:fifo_file { getattr write };