From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 8287C13832E for ; Sat, 13 Aug 2016 18:32:40 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id A24BB21C1F1; Sat, 13 Aug 2016 18:32:11 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 19F2C21C1EB for ; Sat, 13 Aug 2016 18:32:06 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 446C0340CE7 for ; Sat, 13 Aug 2016 18:32:05 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id C6B29246B for ; Sat, 13 Aug 2016 18:32:01 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1471112583.c27f6232c179a438d47547012ee3fb63d3ec320e.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/rtkit.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: c27f6232c179a438d47547012ee3fb63d3ec320e X-VCS-Branch: master Date: Sat, 13 Aug 2016 18:32:01 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: c6677b75-418a-4a69-8d69-64a824cca341 X-Archives-Hash: 9772d0b75c123bef3158481f5f60df0e commit: c27f6232c179a438d47547012ee3fb63d3ec320e Author: Guido Trentalancia trentalancia net> AuthorDate: Sat Aug 13 13:26:42 2016 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sat Aug 13 18:23:03 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c27f6232 Update the rtkit module Update the rtkit daemon module so that the daemon can be started. Signed-off-by: Guido Trentalancia trentalancia.net> policy/modules/contrib/rtkit.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/contrib/rtkit.te b/policy/modules/contrib/rtkit.te index d6390c7..2e8ac03 100644 --- a/policy/modules/contrib/rtkit.te +++ b/policy/modules/contrib/rtkit.te @@ -20,7 +20,7 @@ init_unit_file(rtkit_daemon_unit_t) # Local policy # -allow rtkit_daemon_t self:capability { dac_read_search setuid sys_chroot setgid sys_nice sys_ptrace }; +allow rtkit_daemon_t self:capability { dac_read_search setgid setpcap setuid sys_chroot sys_nice sys_ptrace }; allow rtkit_daemon_t self:process { setsched getcap setcap setrlimit }; kernel_read_system_state(rtkit_daemon_t) From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 0F2ED13832F for ; Sat, 13 Aug 2016 18:35:19 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id ABB6121C204; Sat, 13 Aug 2016 18:35:08 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 7840B21C202 for ; Sat, 13 Aug 2016 18:35:07 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id E4FA3340890 for ; Sat, 13 Aug 2016 18:35:05 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id B739D2467 for ; Sat, 13 Aug 2016 18:35:01 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1471112583.c27f6232c179a438d47547012ee3fb63d3ec320e.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/rtkit.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: c27f6232c179a438d47547012ee3fb63d3ec320e X-VCS-Branch: next Date: Sat, 13 Aug 2016 18:35:01 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: ded68dd4-aa43-402f-a18c-89de381d47fa X-Archives-Hash: ff8a3ff5f76467e929d6e234d667b4e0 Message-ID: <20160813183501.za6RPN_hyO523IAA5gP08zgFrw4OcwiZI9FyW6YANPA@z> commit: c27f6232c179a438d47547012ee3fb63d3ec320e Author: Guido Trentalancia trentalancia net> AuthorDate: Sat Aug 13 13:26:42 2016 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sat Aug 13 18:23:03 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c27f6232 Update the rtkit module Update the rtkit daemon module so that the daemon can be started. Signed-off-by: Guido Trentalancia trentalancia.net> policy/modules/contrib/rtkit.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/contrib/rtkit.te b/policy/modules/contrib/rtkit.te index d6390c7..2e8ac03 100644 --- a/policy/modules/contrib/rtkit.te +++ b/policy/modules/contrib/rtkit.te @@ -20,7 +20,7 @@ init_unit_file(rtkit_daemon_unit_t) # Local policy # -allow rtkit_daemon_t self:capability { dac_read_search setuid sys_chroot setgid sys_nice sys_ptrace }; +allow rtkit_daemon_t self:capability { dac_read_search setgid setpcap setuid sys_chroot sys_nice sys_ptrace }; allow rtkit_daemon_t self:process { setsched getcap setcap setrlimit }; kernel_read_system_state(rtkit_daemon_t)