Gentoo Archives: gentoo-commits

From: Jason Zaman <gentoo@×××××××××.com>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:adminroles commit in: policy/modules/contrib/
Date: Wed, 03 Dec 2014 12:56:40
Message-Id: 1417596199.7e0d04ce8a6717c305f2811ac84d6f1e0f25fc53.perfinion@gentoo
1 commit: 7e0d04ce8a6717c305f2811ac84d6f1e0f25fc53
2 Author: Jason Zaman <jason <AT> perfinion <DOT> com>
3 AuthorDate: Wed Nov 26 06:39:03 2014 +0000
4 Commit: Jason Zaman <gentoo <AT> perfinion <DOT> com>
5 CommitDate: Wed Dec 3 08:43:19 2014 +0000
6 URL: http://sources.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=7e0d04ce
7
8 kerberos: syntax error in kerberos_admin
9
10 ---
11 policy/modules/contrib/kerberos.if | 4 ++--
12 1 file changed, 2 insertions(+), 2 deletions(-)
13
14 diff --git a/policy/modules/contrib/kerberos.if b/policy/modules/contrib/kerberos.if
15 index f6c00d8..77a5c49 100644
16 --- a/policy/modules/contrib/kerberos.if
17 +++ b/policy/modules/contrib/kerberos.if
18 @@ -490,8 +490,8 @@ interface(`kerberos_admin',`
19 type krb5kdc_var_run_t, krb5_host_rcache_t;
20 ')
21
22 - allow $1 { kadmind_t krb5kdc_t kpropd }:process { ptrace signal_perms };
23 - ps_process_pattern($1, { kadmind_t krb5kdc_t kpropd })
24 + allow $1 { kadmind_t krb5kdc_t kpropd_t }:process { ptrace signal_perms };
25 + ps_process_pattern($1, { kadmind_t krb5kdc_t kpropd_t })
26
27 init_labeled_script_domtrans($1, kerberos_initrc_exec_t)
28 domain_system_change_exemption($1)