commit: c5190f916e9d71de114558b6768c8fd83e38173c Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> AuthorDate: Thu Jun 8 22:28:50 2017 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Tue Jun 13 08:03:23 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c5190f91
rkhunter: Fix module version and move lines. policy/modules/contrib/rkhunter.te | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/policy/modules/contrib/rkhunter.te b/policy/modules/contrib/rkhunter.te index a57c826b..4ebfdf6c 100644 --- a/policy/modules/contrib/rkhunter.te +++ b/policy/modules/contrib/rkhunter.te @@ -1,4 +1,4 @@ -policy_module(rkhunter, 0.0.1) +policy_module(rkhunter, 1.0.0) ######################################## # @@ -21,15 +21,15 @@ type rkhunter_exec_t; application_domain(rkhunter_t, rkhunter_exec_t) role rkhunter_roles types rkhunter_t; -type rkhunter_var_lib_t; -files_type(rkhunter_var_lib_t) - type rkhunter_log_t; logging_log_file(rkhunter_log_t) type rkhunter_tmpfs_t; files_tmpfs_file(rkhunter_tmpfs_t) +type rkhunter_var_lib_t; +files_type(rkhunter_var_lib_t) + ######################################## # # Application local policy @@ -77,8 +77,6 @@ domain_use_interactive_fds(rkhunter_t) domain_getattr_all_sockets(rkhunter_t) domain_getattr_all_pipes(rkhunter_t) -hostname_exec(rkhunter_t) - files_read_non_auth_files(rkhunter_t) files_read_all_symlinks(rkhunter_t) files_read_all_chr_files(rkhunter_t) @@ -88,10 +86,12 @@ files_getattr_all_sockets(rkhunter_t) fs_getattr_tracefs(rkhunter_t) fs_getattr_tracefs_dirs(rkhunter_t) -modutils_exec(rkhunter_t) +hostname_exec(rkhunter_t) logging_send_syslog_msg(rkhunter_t) +modutils_exec(rkhunter_t) + sysnet_exec_ifconfig(rkhunter_t) userdom_use_inherited_user_terminals(rkhunter_t)
