>From a0b54ada732c3f9141c6be0c94c9e1230ae8a1c7 Mon Sep 17 00:00:00 2001 From: Luke Macken Date: Fri, 21 Nov 2008 19:01:28 +0000 Subject: [PATCH] Update our masher SELinux policy module to allow cvs/rpm usage diff --git a/configs/system/selinux/modules/masher.pp b/configs/system/selinux/modules/masher.pp index 6dfc9e2be5b4866a95a414f137fd8fb2054bdc71..4fccc6d9fadba7a527a40c132a8237a5f6f85b19 100644 GIT binary patch delta 394 zcmZ3nlX1p=Mxp-yH9r{{7#Ns5-FcqK7Z_38X1>~`U zc>Kv_#qp^Xsmbvryg)G~keES0!D^QpnB+QkRnHOIIGK&$!<;f^1 zDM*Pg0U5;xHVUK-Vid?S=E=6EU5uQQADBx|<~P@1Rz1O*QagPe`WV^^cR0d2)`6 diff --git a/configs/system/selinux/modules/masher.te b/configs/system/selinux/modules/masher.te index b133a5c..d31f1d2 100644 --- a/configs/system/selinux/modules/masher.te +++ b/configs/system/selinux/modules/masher.te @@ -2,6 +2,14 @@ policy_module(masher,1.0.0) gen_require(` type httpd_t; + type rpm_var_lib_t; ') domain_read_all_domains_state(httpd_t) + +cvs_exec(httpd_t) +rpm_exec(httpd_t) + +allow httpd_t rpm_var_lib_t:dir { getattr search }; +allow httpd_t rpm_var_lib_t:file { read_file_perms }; + -- 1.5.5.1