commit: f659d7a06b408e7d6755c83a8bed13580321302e
Author: Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Tue Nov 25 20:16:59 2014 +0000
Commit: Jason Zaman <gentoo <AT> perfinion <DOT> com>
CommitDate: Tue Nov 25 20:16:59 2014 +0000
URL:
http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=f659d7a0
kerberos: syntax error in kerberos_admin
---
policy/modules/contrib/kerberos.if | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/policy/modules/contrib/kerberos.if
b/policy/modules/contrib/kerberos.if
index f6c00d8..9d898c9 100644
--- a/policy/modules/contrib/kerberos.if
+++ b/policy/modules/contrib/kerberos.if
@@ -490,7 +490,7 @@ interface(`kerberos_admin',`
type krb5kdc_var_run_t, krb5_host_rcache_t;
')
- allow $1 { kadmind_t krb5kdc_t kpropd }:process { ptrace signal_perms };
+ allow $1 { kadmind_t krb5kdc_t kpropd_t }:process { ptrace signal_perms
};
ps_process_pattern($1, { kadmind_t krb5kdc_t kpropd })
init_labeled_script_domtrans($1, kerberos_initrc_exec_t)