Changeset: b659dc7e3463 for MonetDB
URL: https://dev.monetdb.org/hg/MonetDB?cmd=changeset;node=b659dc7e3463
Modified Files:
buildtools/selinux/monetdb.te
Branch: Jun2020
Log Message:
The selinux type sigterm does not exist, the generic signal should suffice.
diffs (21 lines):
diff --git a/buildtools/selinux/monetdb.te b/buildtools/selinux/monetdb.te
--- a/buildtools/selinux/monetdb.te
+++ b/buildtools/selinux/monetdb.te
@@ -18,7 +18,7 @@ require {
class fifo_file { getattr read write };
class file { entrypoint execute getattr manage_file_perms map open read
};
class netlink_selinux_socket create_socket_perms;
- class process { rlimitinh siginh signal sigchld sigterm sigkill
transition };
+ class process { rlimitinh siginh signal sigchld sigkill transition };
class tcp_socket create_stream_socket_perms;
class udp_socket create_stream_socket_perms;
class unix_dgram_socket create_socket_perms;
@@ -45,7 +45,7 @@ allow mserver5_t mserver5_exec_t:file {
type_transition monetdbd_t mserver5_exec_t:process mserver5_t;
# monetdbd must be allowed to kill the server it started
-allow monetdbd_t mserver5_t:process { sigterm sigkill };
+allow monetdbd_t mserver5_t:process sigkill;
# on EPEL 7 we need these as well
allow mserver5_t monetdbd_t:process sigchld;
allow monetdbd_t unconfined_service_t:process signal;
_______________________________________________
checkin-list mailing list
[email protected]
https://www.monetdb.org/mailman/listinfo/checkin-list
