From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id B73BB139695 for ; Sat, 25 Feb 2017 16:58:03 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E426EE0D63; Sat, 25 Feb 2017 16:58:02 +0000 (UTC) Received: from smtp.gentoo.org (mail.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id C2B29E0D5F for ; Sat, 25 Feb 2017 16:58:02 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 009A8341026 for ; Sat, 25 Feb 2017 16:58:02 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id B949B544F for ; Sat, 25 Feb 2017 16:58:00 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1488040991.6fb566c033803208cc19261105ce611225d5f08d.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/init.if X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 6fb566c033803208cc19261105ce611225d5f08d X-VCS-Branch: master Date: Sat, 25 Feb 2017 16:58:00 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 31c05068-8d43-48ec-9f58-5f8a40d86fb5 X-Archives-Hash: e9b5e2c9c939fa2fd618abd9ff63fa79 commit: 6fb566c033803208cc19261105ce611225d5f08d Author: Chris PeBenito ieee org> AuthorDate: Sat Feb 25 13:39:58 2017 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 25 16:43:11 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=6fb566c0 init: Move interface and whitespace change. policy/modules/system/init.if | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index b1778f1a..8d65e648 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -1137,12 +1137,12 @@ interface(`init_var_lib_filetrans',` ###################################### ## -## Allow search directory in the /run/systemd directory. +## Allow search directory in the /run/systemd directory. ## ## -## -## Domain allowed access. -## +## +## Domain allowed access. +## ## # interface(`init_search_pids',` @@ -2270,7 +2270,7 @@ interface(`init_read_script_tmp_files',` ######################################## ## -## Read and write init script temporary data. +## Read and write init script inherited temporary data. ## ## ## @@ -2278,18 +2278,17 @@ interface(`init_read_script_tmp_files',` ## ## # -interface(`init_rw_script_tmp_files',` +interface(`init_rw_inherited_script_tmp_files',` gen_require(` type initrc_tmp_t; ') - files_search_tmp($1) - rw_files_pattern($1, initrc_tmp_t, initrc_tmp_t) + allow $1 initrc_tmp_t:file rw_inherited_file_perms; ') ######################################## ## -## Read and write init script inherited temporary data. +## Read and write init script temporary data. ## ## ## @@ -2297,12 +2296,13 @@ interface(`init_rw_script_tmp_files',` ## ## # -interface(`init_rw_inherited_script_tmp_files',` +interface(`init_rw_script_tmp_files',` gen_require(` type initrc_tmp_t; ') - allow $1 initrc_tmp_t:file rw_inherited_file_perms; + files_search_tmp($1) + rw_files_pattern($1, initrc_tmp_t, initrc_tmp_t) ') ######################################## From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 527DF139694 for ; Sat, 25 Feb 2017 16:58:25 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id F3DE9E0D77; Sat, 25 Feb 2017 16:58:09 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id D6AC0E0D77 for ; Sat, 25 Feb 2017 16:58:04 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 00A9A34161D for ; Sat, 25 Feb 2017 16:58:03 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 7B38D5458 for ; Sat, 25 Feb 2017 16:58:01 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1488040991.6fb566c033803208cc19261105ce611225d5f08d.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/init.if X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 6fb566c033803208cc19261105ce611225d5f08d X-VCS-Branch: next Date: Sat, 25 Feb 2017 16:58:01 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 97af3d76-29ed-498f-8062-73a97140e93d X-Archives-Hash: 26168c2979767249d8f45597e376e2e7 Message-ID: <20170225165801.EtIpL5-3oL7LO40_jRotA4uZojDUcYAi7Qmr2N0doE4@z> commit: 6fb566c033803208cc19261105ce611225d5f08d Author: Chris PeBenito ieee org> AuthorDate: Sat Feb 25 13:39:58 2017 +0000 Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 25 16:43:11 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=6fb566c0 init: Move interface and whitespace change. policy/modules/system/init.if | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if index b1778f1a..8d65e648 100644 --- a/policy/modules/system/init.if +++ b/policy/modules/system/init.if @@ -1137,12 +1137,12 @@ interface(`init_var_lib_filetrans',` ###################################### ## -## Allow search directory in the /run/systemd directory. +## Allow search directory in the /run/systemd directory. ## ## -## -## Domain allowed access. -## +## +## Domain allowed access. +## ## # interface(`init_search_pids',` @@ -2270,7 +2270,7 @@ interface(`init_read_script_tmp_files',` ######################################## ## -## Read and write init script temporary data. +## Read and write init script inherited temporary data. ## ## ## @@ -2278,18 +2278,17 @@ interface(`init_read_script_tmp_files',` ## ## # -interface(`init_rw_script_tmp_files',` +interface(`init_rw_inherited_script_tmp_files',` gen_require(` type initrc_tmp_t; ') - files_search_tmp($1) - rw_files_pattern($1, initrc_tmp_t, initrc_tmp_t) + allow $1 initrc_tmp_t:file rw_inherited_file_perms; ') ######################################## ## -## Read and write init script inherited temporary data. +## Read and write init script temporary data. ## ## ## @@ -2297,12 +2296,13 @@ interface(`init_rw_script_tmp_files',` ## ## # -interface(`init_rw_inherited_script_tmp_files',` +interface(`init_rw_script_tmp_files',` gen_require(` type initrc_tmp_t; ') - allow $1 initrc_tmp_t:file rw_inherited_file_perms; + files_search_tmp($1) + rw_files_pattern($1, initrc_tmp_t, initrc_tmp_t) ') ########################################