From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 92602138010 for ; Tue, 21 Aug 2012 17:53:37 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 15AB6E062D; Tue, 21 Aug 2012 17:52:30 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id D98D5E062B for ; Tue, 21 Aug 2012 17:52:29 +0000 (UTC) Received: from hornbill.gentoo.org (hornbill.gentoo.org [94.100.119.163]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id C4D321B4320 for ; Tue, 21 Aug 2012 17:52:28 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by hornbill.gentoo.org (Postfix) with ESMTP id 1D957E544B for ; Tue, 21 Aug 2012 17:52:26 +0000 (UTC) From: "Sven Vermeulen" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" Message-ID: <1345211109.83a680ef91510d7688db90671d59be63d01e98da.SwifT@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/roles/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/roles/sysadm.te X-VCS-Directories: policy/modules/roles/ X-VCS-Committer: SwifT X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: 83a680ef91510d7688db90671d59be63d01e98da X-VCS-Branch: master Date: Tue, 21 Aug 2012 17:52:26 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 82b87a0f-acbd-429f-9b00-244713653a3c X-Archives-Hash: 80dac99b8d3ed94338cc1187b0d2f3e2 commit: 83a680ef91510d7688db90671d59be63d01e98da Author: Sven Vermeulen siphos be> AuthorDate: Thu Aug 16 18:20:53 2012 +0000 Commit: Sven Vermeulen siphos be> CommitDate: Fri Aug 17 13:45:09 2012 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=83a680ef Allow sysadm_t to administer postgresql service Allow the sysadm_t domain to administer the postgresql service by executing the postgresql init script (postgresql_initrc_exec_t) with the proper transition in place. --- policy/modules/roles/sysadm.te | 5 +++++ 1 files changed, 5 insertions(+), 0 deletions(-) diff --git a/policy/modules/roles/sysadm.te b/policy/modules/roles/sysadm.te index c7f603e..810fbc6 100644 --- a/policy/modules/roles/sysadm.te +++ b/policy/modules/roles/sysadm.te @@ -292,6 +292,11 @@ optional_policy(` ') optional_policy(` + postgresql_admin(sysadm_t, sysadm_r) + postgresql_exec(sysadm_t) +') + +optional_policy(` pyzor_role(sysadm_r, sysadm_t) ')