selinux/oracle-xe-selinux/oracle-xe.te | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
New commits:
commit 7e3ec61738a5a858eebeffceee00681f8c15ef37
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Fri Jul 31 16:08:58 2009 +0200
Use rw_files_pattern instead of direct allows, to get open on Fedora 12.
Addressing:
avc: denied { open } for pid=2673 comm="oracle" name="init.ora"
dev=dm-0 ino=133004 scontext=unconfined_u:system_r:oracle_db_t:s0
tcontext=user_u:object_r:oracle_sqlplus_log_t:s0 tclass=file
diff --git a/selinux/oracle-xe-selinux/oracle-xe.te
b/selinux/oracle-xe-selinux/oracle-xe.te
index db49772..7094acf 100644
--- a/selinux/oracle-xe-selinux/oracle-xe.te
+++ b/selinux/oracle-xe-selinux/oracle-xe.te
@@ -12,8 +12,7 @@ require {
type initrc_t;
}
-allow oracle_db_t oracle_sqlplus_log_t:file { read write getattr };
-allow oracle_db_t oracle_sqlplus_log_t:dir { search };
+rw_files_pattern(oracle_db_t, oracle_sqlplus_log_t, oracle_sqlplus_log_t)
dontaudit oracle_db_t devpts_t:chr_file { ioctl };
Show replies by date