Hello Douglas Schilling Landgraf,
I'd like you to do a code review. Please visit
https://gerrit.ovirt.org/47159
to review the following change.
Change subject: semodule: avoid avc in tmpfs_t file (unlink)
......................................................................
semodule: avoid avc in tmpfs_t file (unlink)
The unlink operation in systemd_hostnamed is raising
AVC, this patch fix it.
Change-Id: Ie4f5af9069d8debe1dac05c531b5e7f2273221bc
Signed-off-by: Douglas Schilling Landgraf <[email protected]>
---
M semodule/ovirt.te.in
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/59/47159/1
diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index fd4489e..92fbf15 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -136,6 +136,7 @@
#============= systemd_hostnamectl ==============
@SEMODULE_WITH_SYSTEMD@allow systemd_hostnamed_t tmpfs_t:dir { write
remove_name search add_name };
+@SEMODULE_WITH_SYSTEMD@allow systemd_hostnamed_t tmpfs_t:file { unlink };
@SEMODULE_WITH_SYSTEMD@allow systemd_hostnamed_t ovirt_t:dbus send_msg;
#============= hald_t ==============
--
To view, visit https://gerrit.ovirt.org/47159
To unsubscribe, visit https://gerrit.ovirt.org/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie4f5af9069d8debe1dac05c531b5e7f2273221bc
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Fabian Deutsch <[email protected]>
Gerrit-Reviewer: Douglas Schilling Landgraf <[email protected]>
_______________________________________________
node-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/node-patches
