From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id BDDAA13888F for ; Mon, 26 Oct 2015 05:48:53 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 4B98AE080D; Mon, 26 Oct 2015 05:48:44 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 73687E080D for ; Mon, 26 Oct 2015 05:48:42 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 4D57C340B0C for ; Mon, 26 Oct 2015 05:48:41 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 2075F193B for ; Mon, 26 Oct 2015 05:48:38 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1445832616.4f1ef29d168da11699a2dd5dcf9d7242bf5d1515.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/avahi.te policy/modules/contrib/cups.te policy/modules/contrib/dbus.te policy/modules/contrib/iscsi.te policy/modules/contrib/rpcbind.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 4f1ef29d168da11699a2dd5dcf9d7242bf5d1515 X-VCS-Branch: master Date: Mon, 26 Oct 2015 05:48:38 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: a43db5a9-9070-4844-9027-da70dfbcd020 X-Archives-Hash: aec5fd68918775813b49f7d2ec60ae5a commit: 4f1ef29d168da11699a2dd5dcf9d7242bf5d1515 Author: Chris PeBenito tresys com> AuthorDate: Fri Oct 23 18:35:45 2015 +0000 Commit: Jason Zaman gentoo org> CommitDate: Mon Oct 26 04:10:16 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4f1ef29d Add systemd socket activations. policy/modules/contrib/avahi.te | 1 + policy/modules/contrib/cups.te | 1 + policy/modules/contrib/dbus.te | 1 + policy/modules/contrib/iscsi.te | 1 + policy/modules/contrib/rpcbind.te | 1 + 5 files changed, 5 insertions(+) diff --git a/policy/modules/contrib/avahi.te b/policy/modules/contrib/avahi.te index 46d5aba..161763f 100644 --- a/policy/modules/contrib/avahi.te +++ b/policy/modules/contrib/avahi.te @@ -8,6 +8,7 @@ policy_module(avahi, 1.15.1) type avahi_t; type avahi_exec_t; init_daemon_domain(avahi_t, avahi_exec_t) +init_named_socket_activation(avahi_t, avahi_var_run_t) type avahi_initrc_exec_t; init_script_file(avahi_initrc_exec_t) diff --git a/policy/modules/contrib/cups.te b/policy/modules/contrib/cups.te index 662b991..261dc06 100644 --- a/policy/modules/contrib/cups.te +++ b/policy/modules/contrib/cups.te @@ -15,6 +15,7 @@ files_pid_file(cupsd_config_var_run_t) type cupsd_t; type cupsd_exec_t; init_daemon_domain(cupsd_t, cupsd_exec_t) +init_named_socket_activation(cupsd_t, cupsd_var_run_t) mls_trusted_object(cupsd_t) type cupsd_etc_t; diff --git a/policy/modules/contrib/dbus.te b/policy/modules/contrib/dbus.te index e79a81a..e32b70a 100644 --- a/policy/modules/contrib/dbus.te +++ b/policy/modules/contrib/dbus.te @@ -35,6 +35,7 @@ userdom_user_tmp_file(session_dbusd_tmp_t) type system_dbusd_t; init_system_domain(system_dbusd_t, dbusd_exec_t) +init_named_socket_activation(system_dbusd_t, system_dbusd_var_run_t) type system_dbusd_tmp_t; files_tmp_file(system_dbusd_tmp_t) diff --git a/policy/modules/contrib/iscsi.te b/policy/modules/contrib/iscsi.te index 070f8e3..43f85f3 100644 --- a/policy/modules/contrib/iscsi.te +++ b/policy/modules/contrib/iscsi.te @@ -8,6 +8,7 @@ policy_module(iscsi, 1.9.1) type iscsid_t; type iscsid_exec_t; init_daemon_domain(iscsid_t, iscsid_exec_t) +init_abstract_socket_activation(iscsid_t) type iscsi_initrc_exec_t; init_script_file(iscsi_initrc_exec_t) diff --git a/policy/modules/contrib/rpcbind.te b/policy/modules/contrib/rpcbind.te index 9cdb548..fab6184 100644 --- a/policy/modules/contrib/rpcbind.te +++ b/policy/modules/contrib/rpcbind.te @@ -8,6 +8,7 @@ policy_module(rpcbind, 1.8.2) type rpcbind_t; type rpcbind_exec_t; init_daemon_domain(rpcbind_t, rpcbind_exec_t) +init_named_socket_activation(rpcbind_t, rpcbind_var_run_t) type rpcbind_initrc_exec_t; init_script_file(rpcbind_initrc_exec_t) From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 4830313888F for ; Mon, 26 Oct 2015 05:36:47 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 5ED4FE0818; Mon, 26 Oct 2015 05:36:40 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9E73BE080D for ; Mon, 26 Oct 2015 05:36:39 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id E6AD2340ADB for ; Mon, 26 Oct 2015 05:36:38 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id EC754193B for ; Mon, 26 Oct 2015 05:36:35 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1445832616.4f1ef29d168da11699a2dd5dcf9d7242bf5d1515.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/avahi.te policy/modules/contrib/cups.te policy/modules/contrib/dbus.te policy/modules/contrib/iscsi.te policy/modules/contrib/rpcbind.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 4f1ef29d168da11699a2dd5dcf9d7242bf5d1515 X-VCS-Branch: next Date: Mon, 26 Oct 2015 05:36:35 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 0169fb8c-8f10-4dfa-8bce-d494809fd07f X-Archives-Hash: 02abf96a58178431b712a8217b2a5397 Message-ID: <20151026053635.nPVKeJGh7HzVgYUy-p3ajhJUesry_rKFBg3xbujMjDk@z> commit: 4f1ef29d168da11699a2dd5dcf9d7242bf5d1515 Author: Chris PeBenito tresys com> AuthorDate: Fri Oct 23 18:35:45 2015 +0000 Commit: Jason Zaman gentoo org> CommitDate: Mon Oct 26 04:10:16 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4f1ef29d Add systemd socket activations. policy/modules/contrib/avahi.te | 1 + policy/modules/contrib/cups.te | 1 + policy/modules/contrib/dbus.te | 1 + policy/modules/contrib/iscsi.te | 1 + policy/modules/contrib/rpcbind.te | 1 + 5 files changed, 5 insertions(+) diff --git a/policy/modules/contrib/avahi.te b/policy/modules/contrib/avahi.te index 46d5aba..161763f 100644 --- a/policy/modules/contrib/avahi.te +++ b/policy/modules/contrib/avahi.te @@ -8,6 +8,7 @@ policy_module(avahi, 1.15.1) type avahi_t; type avahi_exec_t; init_daemon_domain(avahi_t, avahi_exec_t) +init_named_socket_activation(avahi_t, avahi_var_run_t) type avahi_initrc_exec_t; init_script_file(avahi_initrc_exec_t) diff --git a/policy/modules/contrib/cups.te b/policy/modules/contrib/cups.te index 662b991..261dc06 100644 --- a/policy/modules/contrib/cups.te +++ b/policy/modules/contrib/cups.te @@ -15,6 +15,7 @@ files_pid_file(cupsd_config_var_run_t) type cupsd_t; type cupsd_exec_t; init_daemon_domain(cupsd_t, cupsd_exec_t) +init_named_socket_activation(cupsd_t, cupsd_var_run_t) mls_trusted_object(cupsd_t) type cupsd_etc_t; diff --git a/policy/modules/contrib/dbus.te b/policy/modules/contrib/dbus.te index e79a81a..e32b70a 100644 --- a/policy/modules/contrib/dbus.te +++ b/policy/modules/contrib/dbus.te @@ -35,6 +35,7 @@ userdom_user_tmp_file(session_dbusd_tmp_t) type system_dbusd_t; init_system_domain(system_dbusd_t, dbusd_exec_t) +init_named_socket_activation(system_dbusd_t, system_dbusd_var_run_t) type system_dbusd_tmp_t; files_tmp_file(system_dbusd_tmp_t) diff --git a/policy/modules/contrib/iscsi.te b/policy/modules/contrib/iscsi.te index 070f8e3..43f85f3 100644 --- a/policy/modules/contrib/iscsi.te +++ b/policy/modules/contrib/iscsi.te @@ -8,6 +8,7 @@ policy_module(iscsi, 1.9.1) type iscsid_t; type iscsid_exec_t; init_daemon_domain(iscsid_t, iscsid_exec_t) +init_abstract_socket_activation(iscsid_t) type iscsi_initrc_exec_t; init_script_file(iscsi_initrc_exec_t) diff --git a/policy/modules/contrib/rpcbind.te b/policy/modules/contrib/rpcbind.te index 9cdb548..fab6184 100644 --- a/policy/modules/contrib/rpcbind.te +++ b/policy/modules/contrib/rpcbind.te @@ -8,6 +8,7 @@ policy_module(rpcbind, 1.8.2) type rpcbind_t; type rpcbind_exec_t; init_daemon_domain(rpcbind_t, rpcbind_exec_t) +init_named_socket_activation(rpcbind_t, rpcbind_var_run_t) type rpcbind_initrc_exec_t; init_script_file(rpcbind_initrc_exec_t)