Douglas Schilling Landgraf has uploaded a new change for review. Change subject: semodule: avoid avc in tmpfs_t file (unlink) ......................................................................
semodule: avoid avc in tmpfs_t file (unlink) The unlink operation in systemd_hostnamed is raising AVC, this patch fix it. Change-Id: Ie4f5af9069d8debe1dac05c531b5e7f2273221bc Signed-off-by: Douglas Schilling Landgraf <[email protected]> --- M semodule/ovirt.te.in 1 file changed, 1 insertion(+), 0 deletions(-) git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/52/44452/1 diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in index 3c7c0c3..e4971cb 100644 --- a/semodule/ovirt.te.in +++ b/semodule/ovirt.te.in @@ -146,6 +146,7 @@ #============= systemd_hostnamectl ============== @SEMODULE_WITH_SYSTEMD@allow systemd_hostnamed_t tmpfs_t:dir { write remove_name search add_name }; +@SEMODULE_WITH_SYSTEMD@allow systemd_hostnamed_t tmpfs_t:file { unlink }; @SEMODULE_WITH_SYSTEMD@allow systemd_hostnamed_t ovirt_t:dbus send_msg; #============= hald_t ============== -- To view, visit https://gerrit.ovirt.org/44452 To unsubscribe, visit https://gerrit.ovirt.org/settings Gerrit-MessageType: newchange Gerrit-Change-Id: Ie4f5af9069d8debe1dac05c531b5e7f2273221bc Gerrit-PatchSet: 1 Gerrit-Project: ovirt-node Gerrit-Branch: master Gerrit-Owner: Douglas Schilling Landgraf <[email protected]> _______________________________________________ node-patches mailing list [email protected] http://lists.ovirt.org/mailman/listinfo/node-patches
