diff options
| author |   Chris PeBenito <cpebenito@tresys.com> | 2014-01-16 11:24:25 -0500 |
|---|---|---|
| committer |   Sven Vermeulen <sven.vermeulen@siphos.be> | 2014-01-19 19:56:09 +0100 |
| commit | ae86ea44124a8e1ea69ba291efc53ee8149d69d5 (patch) | |
| tree | 961f9a51cfc31182f3bebf9b0f405e846c38574e /policy/modules/system/lvm.te | |
| parent | Merge file_t into unlabeled_t, as they are security equivalent. (diff) | |
| download | hardened-refpolicy-ae86ea44124a8e1ea69ba291efc53ee8149d69d5.tar.gz hardened-refpolicy-ae86ea44124a8e1ea69ba291efc53ee8149d69d5.tar.bz2 hardened-refpolicy-ae86ea44124a8e1ea69ba291efc53ee8149d69d5.zip | |
Update modules for file_t merge into unlabeled_t.
Diffstat (limited to 'policy/modules/system/lvm.te')
| -rw-r--r-- | policy/modules/system/lvm.te | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te index a02b3190..d338dc07 100644 --- a/policy/modules/system/lvm.te +++ b/policy/modules/system/lvm.te @@ -1,4 +1,4 @@ -policy_module(lvm, 1.15.3) +policy_module(lvm, 1.15.4) ######################################## # @@ -217,6 +217,8 @@ kernel_get_sysvipc_info(lvm_t) kernel_read_system_state(lvm_t) # Read system variables in /proc/sys kernel_read_kernel_sysctls(lvm_t) +# for when /usr is not mounted: +kernel_dontaudit_search_unlabeled(lvm_t) # it has no reason to need this kernel_dontaudit_getattr_core_if(lvm_t) kernel_use_fds(lvm_t) @@ -254,8 +256,6 @@ domain_read_all_domains_state(lvm_t) files_read_usr_files(lvm_t) files_read_etc_files(lvm_t) files_read_etc_runtime_files(lvm_t) -# for when /usr is not mounted: -files_dontaudit_search_isid_type_dirs(lvm_t) fs_getattr_xattr_fs(lvm_t) fs_search_auto_mountpoints(lvm_t) @@ -306,7 +306,7 @@ userdom_use_user_terminals(lvm_t) ifdef(`distro_redhat',` # this is from the initrd: - files_rw_isid_type_dirs(lvm_t) + kernel_rw_unlabeled_dirs(lvm_t) optional_policy(` unconfined_domain(lvm_t) |