Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix selinux policy for xrootd due to new SELinux change https://fedor… #272

Merged
merged 1 commit into from
Aug 7, 2015
Merged

Fix selinux policy for xrootd due to new SELinux change https://fedor… #272

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 19 additions & 16 deletions packaging/common/xrootd.te
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,19 +1,22 @@
module xrootd 4;
policy_module(xrootd, 4)

require {
type logrotate_t;
type var_log_t;
type ptmx_t;
type tmpfs_t;
type devpts_t;
class fifo_file { write open getattr };
class chr_file { open read write ioctl getattr };
class filesystem getattr;
}

#============= logrotate_t ==============
allow logrotate_t var_log_t:fifo_file { write open getattr };
allow logrotate_t ptmx_t:chr_file { open read write ioctl };
allow logrotate_t tmpfs_t:filesystem getattr;
allow logrotate_t devpts_t:filesystem getattr;
allow logrotate_t devpts_t:chr_file { getattr open read write ioctl };
optional_policy(`

gen_require(`
type logrotate_t;
type var_log_t;
type ptmx_t;
type tmpfs_t;
type devpts_t;
class fifo_file { write open getattr };
class chr_file { open read write ioctl getattr };
class filesystem getattr;
')
allow logrotate_t var_log_t:fifo_file { write open getattr };
allow logrotate_t ptmx_t:chr_file { open read write ioctl };
allow logrotate_t tmpfs_t:filesystem getattr;
allow logrotate_t devpts_t:filesystem getattr;
allow logrotate_t devpts_t:chr_file { getattr open read write ioctl };
')