selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te | 7 +++++++
1 file changed, 7 insertions(+)
New commits:
commit a1ef5ff8164dc9e23b5a3618408ae7fbb634bac4
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Fri Jan 4 15:18:42 2013 +0100
Allow rhnmd to traverse /var/lib/nocpulse on Spacewalk server.
Addressing
avc: denied { search } for pid=15084 comm="rhnmd"
name="nocpulse" dev=dm-0 ino=2627797
scontext=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023
tcontext=system_u:object_r:spacewalk_monitoring_var_lib_t:s0 tclass=dir
Could not load host key: /var/lib/nocpulse/.ssh/nocpulse-identity
diff --git a/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
b/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
index 5101a45..65996fa 100644
--- a/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
+++ b/selinux/spacewalk-monitoring-selinux/spacewalk-monitoring.te
@@ -187,3 +187,10 @@ optional_policy(`
')
mta_send_mail(spacewalk_monitoring_t)
+
+optional_policy(`
+ gen_require(`
+ type sshd_t;
+ ')
+ allow sshd_t spacewalk_monitoring_var_lib_t:dir { search getattr };
+')
Show replies by date