aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <pebenito@ieee.org>2017-04-18 21:17:36 -0400
committerJason Zaman <jason@perfinion.com>2017-04-30 16:52:41 +0800
commit526babc76c338bc88e77f3bad7fad09cd87cf4cd (patch)
tree15f4dfad1876b1b42b19d3464aeb0286c6231137 /policy/modules/system/lvm.te
parentbootloader from Russell Coker. (diff)
downloadhardened-refpolicy-526babc76c338bc88e77f3bad7fad09cd87cf4cd.tar.gz
hardened-refpolicy-526babc76c338bc88e77f3bad7fad09cd87cf4cd.tar.bz2
hardened-refpolicy-526babc76c338bc88e77f3bad7fad09cd87cf4cd.zip
kmod, lvm, brctl patches from Russell Coker
Patches for modutils, at least one of which is needed to generate an initramfs on Debian. Patch to allow lvm to talk to fifos from dpkg_script_t for postinst scripts etc. Patch for brctl to allow it to create sysfs files.
Diffstat (limited to 'policy/modules/system/lvm.te')
-rw-r--r--policy/modules/system/lvm.te6
1 files changed, 5 insertions, 1 deletions
diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
index 09740eb4..e4b4119a 100644
--- a/policy/modules/system/lvm.te
+++ b/policy/modules/system/lvm.te
@@ -1,4 +1,4 @@
-policy_module(lvm, 1.19.8)
+policy_module(lvm, 1.19.9)
########################################
#
@@ -342,6 +342,10 @@ optional_policy(`
')
optional_policy(`
+ dpkg_script_rw_pipes(lvm_t)
+')
+
+optional_policy(`
gpm_dontaudit_getattr_gpmctl(lvm_t)
')