commit:     f659d7a06b408e7d6755c83a8bed13580321302e
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Tue Nov 25 20:16:59 2014 +0000
Commit:     Jason Zaman <gentoo <AT> perfinion <DOT> com>
CommitDate: Tue Nov 25 20:16:59 2014 +0000
URL:        
http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=f659d7a0

kerberos: syntax error in kerberos_admin

---
 policy/modules/contrib/kerberos.if | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/contrib/kerberos.if 
b/policy/modules/contrib/kerberos.if
index f6c00d8..9d898c9 100644
--- a/policy/modules/contrib/kerberos.if
+++ b/policy/modules/contrib/kerberos.if
@@ -490,7 +490,7 @@ interface(`kerberos_admin',`
                type krb5kdc_var_run_t, krb5_host_rcache_t;
        ')
 
-       allow $1 { kadmind_t krb5kdc_t kpropd }:process { ptrace signal_perms };
+       allow $1 { kadmind_t krb5kdc_t kpropd_t }:process { ptrace signal_perms 
};
        ps_process_pattern($1, { kadmind_t krb5kdc_t kpropd })
 
        init_labeled_script_domtrans($1, kerberos_initrc_exec_t)

Reply via email to