selinux/oracle-selinux/oracle.te | 1 +
1 file changed, 1 insertion(+)
New commits:
commit df8fab9dae4f102d2b39ceeb2faea28863efe34d
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Mon Jan 10 21:04:07 2011 +0100
Allow sqlplus to read /sys/devices/system/node and /sys/devices/system/cpu.
Addressing
avc: denied { search } for pid=7106 comm="sqlplus" name="/" dev=sysfs ino=1 scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir
avc: denied { read } for pid=7106 comm="sqlplus" name="node" dev=sysfs ino=161 scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir
avc: denied { open } for pid=7106 comm="sqlplus" name="node" dev=sysfs ino=161 scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir
with sqlplus 11g doing
7106 open("/sys/devices/system/node", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 4
7106 getdents(4, /* 7 entries */, 32768) = 216
7106 getdents(4, /* 0 entries */, 32768) = 0
7106 close(4) = 0
7106 open("/sys/devices/system/cpu", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 4
7106 getdents(4, /* 15 entries */, 32768) = 448
7106 getdents(4, /* 0 entries */, 32768) = 0
7106 close(4) = 0
diff --git a/selinux/oracle-selinux/oracle.te b/selinux/oracle-selinux/oracle.te
index 7e2e819..8c01722 100644
--- a/selinux/oracle-selinux/oracle.te
+++ b/selinux/oracle-selinux/oracle.te
@@ -218,3 +218,4 @@ require {
}
allow oracle_sqlplus_t self:netlink_route_socket { write getattr read bind create nlmsg_read };
+dev_list_sysfs(oracle_sqlplus_t)