Gentoo Archives: gentoo-commits

From: Sven Vermeulen <swift@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
Date: Thu, 27 Nov 2014 21:02:02
Message-Id: 1417122038.8a743e507cd42248d705907e7bcb42e268bfab9a.swift@gentoo
1 commit: 8a743e507cd42248d705907e7bcb42e268bfab9a
2 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
3 AuthorDate: Thu Nov 27 21:00:38 2014 +0000
4 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
5 CommitDate: Thu Nov 27 21:00:38 2014 +0000
6 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=8a743e50
7
8 Fix bug 530918 - Allow lvm_t socket creation perms to handle cryptsetup luksFormat
9
10 ---
11 policy/modules/system/lvm.te | 3 +++
12 1 file changed, 3 insertions(+)
13
14 diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
15 index c9fba08..a5952f7 100644
16 --- a/policy/modules/system/lvm.te
17 +++ b/policy/modules/system/lvm.te
18 @@ -361,6 +361,9 @@ ifdef(`distro_gentoo',`
19 # Local lvm policy
20 #
21
22 + # cryptsetup support bug 530918
23 + allow lvm_t self:socket create_stream_socket_perms;
24 +
25 create_dirs_pattern(lvm_t, lvm_etc_t, lvm_metadata_t)
26 filetrans_pattern(lvm_t, lvm_etc_t, lvm_metadata_t, dir, "cache")