1 |
commit: 0706c6d28350a9527ea67ae09b47fcf7ac3f0dc6 |
2 |
Author: cgzones <cgzones <AT> googlemail <DOT> com> |
3 |
AuthorDate: Wed Mar 8 18:34:49 2017 +0000 |
4 |
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Mar 30 13:58:38 2017 +0000 |
6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=0706c6d2 |
7 |
|
8 |
vnstatd: update |
9 |
|
10 |
use userdom_use_inherited_user_terminals() |
11 |
deprecate interfaces: |
12 |
- transition to daemon domain |
13 |
- access to binary lib files |
14 |
|
15 |
policy/modules/contrib/vnstatd.if | 10 ++++++++++ |
16 |
policy/modules/contrib/vnstatd.te | 2 +- |
17 |
2 files changed, 11 insertions(+), 1 deletion(-) |
18 |
|
19 |
diff --git a/policy/modules/contrib/vnstatd.if b/policy/modules/contrib/vnstatd.if |
20 |
index 2d863cb2..ee614638 100644 |
21 |
--- a/policy/modules/contrib/vnstatd.if |
22 |
+++ b/policy/modules/contrib/vnstatd.if |
23 |
@@ -56,6 +56,8 @@ interface(`vnstatd_run_vnstat',` |
24 |
## </param> |
25 |
# |
26 |
interface(`vnstatd_domtrans',` |
27 |
+ refpolicywarn(`$0($*) has been deprecated') |
28 |
+ |
29 |
gen_require(` |
30 |
type vnstatd_t, vnstatd_exec_t; |
31 |
') |
32 |
@@ -75,6 +77,8 @@ interface(`vnstatd_domtrans',` |
33 |
## </param> |
34 |
# |
35 |
interface(`vnstatd_search_lib',` |
36 |
+ refpolicywarn(`$0($*) has been deprecated') |
37 |
+ |
38 |
gen_require(` |
39 |
type vnstatd_var_lib_t; |
40 |
') |
41 |
@@ -95,6 +99,8 @@ interface(`vnstatd_search_lib',` |
42 |
## </param> |
43 |
# |
44 |
interface(`vnstatd_manage_lib_dirs',` |
45 |
+ refpolicywarn(`$0($*) has been deprecated') |
46 |
+ |
47 |
gen_require(` |
48 |
type vnstatd_var_lib_t; |
49 |
') |
50 |
@@ -114,6 +120,8 @@ interface(`vnstatd_manage_lib_dirs',` |
51 |
## </param> |
52 |
# |
53 |
interface(`vnstatd_read_lib_files',` |
54 |
+ refpolicywarn(`$0($*) has been deprecated') |
55 |
+ |
56 |
gen_require(` |
57 |
type vnstatd_var_lib_t; |
58 |
') |
59 |
@@ -134,6 +142,8 @@ interface(`vnstatd_read_lib_files',` |
60 |
## </param> |
61 |
# |
62 |
interface(`vnstatd_manage_lib_files',` |
63 |
+ refpolicywarn(`$0($*) has been deprecated') |
64 |
+ |
65 |
gen_require(` |
66 |
type vnstatd_var_lib_t; |
67 |
') |
68 |
|
69 |
diff --git a/policy/modules/contrib/vnstatd.te b/policy/modules/contrib/vnstatd.te |
70 |
index 46419e83..69a93d0b 100644 |
71 |
--- a/policy/modules/contrib/vnstatd.te |
72 |
+++ b/policy/modules/contrib/vnstatd.te |
73 |
@@ -91,7 +91,7 @@ miscfiles_read_localization(vnstat_t) |
74 |
|
75 |
userdom_dontaudit_search_user_home_dirs(vnstat_t) |
76 |
|
77 |
-userdom_use_user_terminals(vnstat_t) |
78 |
+userdom_use_inherited_user_terminals(vnstat_t) |
79 |
|
80 |
optional_policy(` |
81 |
cron_system_entry(vnstat_t, vnstat_exec_t) |