rel-eng/packages/oracle-selinux | 2 +-
selinux/oracle-selinux/oracle-selinux.spec | 5 ++++-
selinux/oracle-selinux/oracle.te | 1 +
3 files changed, 6 insertions(+), 2 deletions(-)
New commits:
commit ad84473ff2aa82ed142c53b66ec1f217bf0cfeab
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Wed Jul 20 08:55:25 2011 +0200
Automatic commit of package [oracle-selinux] release [0.1.23.29-1].
diff --git a/rel-eng/packages/oracle-selinux b/rel-eng/packages/oracle-selinux
index e7413ec..4368cb3 100644
--- a/rel-eng/packages/oracle-selinux
+++ b/rel-eng/packages/oracle-selinux
@@ -1 +1 @@
-0.1.23.28-1 selinux/oracle-selinux/
+0.1.23.29-1 selinux/oracle-selinux/
diff --git a/selinux/oracle-selinux/oracle-selinux.spec
b/selinux/oracle-selinux/oracle-selinux.spec
index 1638670..bbb8d80 100644
--- a/selinux/oracle-selinux/oracle-selinux.spec
+++ b/selinux/oracle-selinux/oracle-selinux.spec
@@ -19,7 +19,7 @@
%endif
Name: oracle-selinux
-Version: 0.1.23.28
+Version: 0.1.23.29
Release: 1%{?obtag}%{?dist}%{?repo}
Summary: SELinux policy module supporting Oracle
Group: System Environment/Base
@@ -232,6 +232,9 @@ fi
%attr(0755,root,root) %{_sbindir}/oracle-nofcontext-selinux-enable
%changelog
+* Wed Jul 20 2011 Jan Pazdziora 0.1.23.29-1
+- Allow sqlplus to read /sys/.../meminfo.
+
* Mon Jul 18 2011 Jan Pazdziora 0.1.23.28-1
- Fedora 15 uses oracledb_port_t instead of oracle_port_t.
commit 24f29ed35f2624ca7fc0730e21da69dec791da25
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Wed Jul 20 08:54:59 2011 +0200
Allow sqlplus to read /sys/.../meminfo.
Addressing
avc: denied { read } for pid=28920 comm="sqlplus"
name="meminfo" dev=sysfs ino=309
scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023
tcontext=system_u:object_r:sysfs_t:s0 tclass=file
avc: denied { open } for pid=28920 comm="sqlplus"
name="meminfo" dev=sysfs ino=309
scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023
tcontext=system_u:object_r:sysfs_t:s0 tclass=file
avc: denied { getattr } for pid=28920 comm="sqlplus"
path="/sys/devices/system/node/node0/meminfo" dev=sysfs ino=309
scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023
tcontext=system_u:object_r:sysfs_t:s0 tclass=file
diff --git a/selinux/oracle-selinux/oracle.te b/selinux/oracle-selinux/oracle.te
index 38bad68..5d220b6 100644
--- a/selinux/oracle-selinux/oracle.te
+++ b/selinux/oracle-selinux/oracle.te
@@ -221,6 +221,7 @@ require {
allow oracle_sqlplus_t self:netlink_route_socket { write getattr read bind create
nlmsg_read };
dev_list_sysfs(oracle_sqlplus_t)
+dev_read_sysfs(oracle_sqlplus_t)
filetrans_pattern(oracle_db_t, oracle_tnslsnr_log_t, oracle_db_log_t, { file })
create_files_pattern(oracle_db_t, oracle_tnslsnr_log_t, oracle_db_log_t)
Show replies by date