Gentoo Archives: gentoo-commits

From: Sven Vermeulen <sven.vermeulen@××××××.be>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/
Date: Fri, 02 Nov 2012 19:14:16
Message-Id: 1351883367.30db518f2c5da9ada9eaabb57e180ff883d7be91.SwifT@gentoo
1 commit: 30db518f2c5da9ada9eaabb57e180ff883d7be91
2 Author: Dominick Grift <dominick.grift <AT> gmail <DOT> com>
3 AuthorDate: Fri Nov 2 17:42:56 2012 +0000
4 Commit: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
5 CommitDate: Fri Nov 2 19:09:27 2012 +0000
6 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=30db518f
7
8 One chown too many
9
10 Signed-off-by: Dominick Grift <dominick.grift <AT> gmail.com>
11
12 ---
13 policy/modules/contrib/zarafa.te | 4 ++--
14 1 files changed, 2 insertions(+), 2 deletions(-)
15
16 diff --git a/policy/modules/contrib/zarafa.te b/policy/modules/contrib/zarafa.te
17 index 95ee5f1..b10413b 100644
18 --- a/policy/modules/contrib/zarafa.te
19 +++ b/policy/modules/contrib/zarafa.te
20 @@ -1,4 +1,4 @@
21 -policy_module(zarafa, 1.1.1)
22 +policy_module(zarafa, 1.1.2)
23
24 ########################################
25 #
26 @@ -160,7 +160,7 @@ corenet_tcp_sendrecv_smtp_port(zarafa_spooler_t)
27 # Zarafa domain local policy
28 #
29
30 -allow zarafa_domain self:capability { chown kill dac_override chown setgid setuid };
31 +allow zarafa_domain self:capability { kill dac_override chown setgid setuid };
32 allow zarafa_domain self:process { setrlimit signal };
33 allow zarafa_domain self:fifo_file rw_fifo_file_perms;
34 allow zarafa_domain self:tcp_socket { accept listen };