| 1 |
commit: 1fe4a68fc6e8a979fb6db744109500bf32f8283b |
| 2 |
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> |
| 3 |
AuthorDate: Tue Jul 7 14:38:57 2015 +0000 |
| 4 |
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Tue Jul 7 14:38:57 2015 +0000 |
| 6 |
URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=1fe4a68f |
| 7 |
|
| 8 |
Salt minion uses blkid for mount info |
| 9 |
|
| 10 |
To view the mount state information, salt minion calls the blkid binary. |
| 11 |
|
| 12 |
policy/modules/contrib/salt.te | 2 ++ |
| 13 |
1 file changed, 2 insertions(+) |
| 14 |
|
| 15 |
diff --git a/policy/modules/contrib/salt.te b/policy/modules/contrib/salt.te |
| 16 |
index 576d424..00d1931 100644 |
| 17 |
--- a/policy/modules/contrib/salt.te |
| 18 |
+++ b/policy/modules/contrib/salt.te |
| 19 |
@@ -284,6 +284,8 @@ files_manage_all_non_security_file_types(salt_minion_t) |
| 20 |
|
| 21 |
fs_getattr_all_fs(salt_minion_t) |
| 22 |
|
| 23 |
+fstools_domtrans(salt_minion_t) |
| 24 |
+ |
| 25 |
getty_use_fds(salt_minion_t) |
| 26 |
|
| 27 |
init_exec_rc(salt_minion_t) |
Archives