client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te | 3 +++ 1 file changed, 3 insertions(+)
New commits: commit 17701442abdbd239ce69f03ccd71f72ea357c57b Author: Jan Pazdziora jpazdziora@redhat.com Date: Mon Jan 17 14:36:39 2011 +0100
Silence InstantClient 11g-related AVCs in osa-dispatcher.
avc: denied { search } for pid=7819 comm="osa-dispatcher" scontext=unconfined_u:system_r:osa_dispatcher_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir avc: denied { read } for pid=7819 comm="osa-dispatcher" scontext=unconfined_u:system_r:osa_dispatcher_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file avc: denied { search } for pid=7819 comm="osa-dispatcher" name="/" dev=sysfs ino=1 scontext=unconfined_u:system_r:osa_dispatcher_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir avc: denied { read } for pid=7819 comm="osa-dispatcher" name="node" dev=sysfs ino=121 scontext=unconfined_u:system_r:osa_dispatcher_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir avc: denied { open } for pid=7819 comm="osa-dispatcher" name="node" dev=sysfs ino=121 scontext=unconfined_u:system_r:osa_dispatcher_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir
diff --git a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te index 9c1ce83..91e154e 100644 --- a/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te +++ b/client/tools/osad/osa-dispatcher-selinux/osa-dispatcher.te @@ -90,3 +90,6 @@ allow osa_dispatcher_t oracle_port_t:tcp_socket name_connect; ')
postgresql_stream_connect(osa_dispatcher_t) + +kernel_read_kernel_sysctls(osa_dispatcher_t) +dev_list_sysfs(osa_dispatcher_t)
spacewalk-commits@lists.fedorahosted.org