Gentoo Archives: gentoo-commits

From: Sven Vermeulen <swift@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/
Date: Sat, 07 Jun 2014 19:18:15
Message-Id: 1402168549.3d6ceaf09456045483ebfdab649c7b0458083630.swift@gentoo
1 commit: 3d6ceaf09456045483ebfdab649c7b0458083630
2 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
3 AuthorDate: Sat Jun 7 19:15:49 2014 +0000
4 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
5 CommitDate: Sat Jun 7 19:15:49 2014 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=3d6ceaf0
7
8 Some restructuring
9
10 ---
11 policy/modules/contrib/dropbox.te | 9 ++++++---
12 1 file changed, 6 insertions(+), 3 deletions(-)
13
14 diff --git a/policy/modules/contrib/dropbox.te b/policy/modules/contrib/dropbox.te
15 index 0921a59..f3d01e9 100644
16 --- a/policy/modules/contrib/dropbox.te
17 +++ b/policy/modules/contrib/dropbox.te
18 @@ -100,19 +100,22 @@ corenet_tcp_sendrecv_generic_if(dropbox_t)
19 corenet_tcp_sendrecv_generic_node(dropbox_t)
20
21 tunable_policy(`dropbox_bind_port',`
22 + allow dropbox_t self:tcp_socket { accept listen };
23 + allow dropbox_t self:udp_socket { send_msg recv_msg };
24 +
25 corenet_tcp_bind_dropbox_port(dropbox_t)
26 corenet_udp_bind_dropbox_port(dropbox_t)
27 corenet_tcp_bind_generic_node(dropbox_t)
28 corenet_udp_bind_generic_node(dropbox_t)
29 - allow dropbox_t self:tcp_socket { accept listen };
30 - allow dropbox_t self:udp_socket { send_msg recv_msg };
31 ')
32
33 ifdef(`distro_gentoo',`
34 optional_policy(`
35 xdg_read_config_home_files(dropbox_t)
36 xdg_read_data_home_files(dropbox_t)
37 + ')
38 +
39 + optional_policy(`
40 userdom_user_content_access_template(dropbox, dropbox_t)
41 ')
42 ')
43 -