From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <gentoo-commits+bounces-950663-garchives=archives.gentoo.org@lists.gentoo.org> Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 7576F139694 for <garchives@archives.gentoo.org>; Thu, 18 May 2017 17:04:04 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 03CDBE0EBE; Thu, 18 May 2017 17:03:39 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id D8533E0EBE for <gentoo-commits@lists.gentoo.org>; Thu, 18 May 2017 17:03:38 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 4AF033416BD for <gentoo-commits@lists.gentoo.org>; Thu, 18 May 2017 17:03:32 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 7C3BC7467 for <gentoo-commits@lists.gentoo.org>; Thu, 18 May 2017 17:03:29 +0000 (UTC) From: "Sven Vermeulen" <swift@gentoo.org> To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" <swift@gentoo.org> Message-ID: <1495126913.5164572d4f1c9c12bcad411349ee23f196dcc524.swift@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/chronyd.fc policy/modules/contrib/chronyd.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: swift X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: 5164572d4f1c9c12bcad411349ee23f196dcc524 X-VCS-Branch: master Date: Thu, 18 May 2017 17:03:29 +0000 (UTC) Precedence: bulk List-Post: <mailto:gentoo-commits@lists.gentoo.org> List-Help: <mailto:gentoo-commits+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org> X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: f48932c5-4f02-4c27-9ec9-40c78b88205e X-Archives-Hash: db2a4f162f4386f679e01a37deda8d5b commit: 5164572d4f1c9c12bcad411349ee23f196dcc524 Author: Luis Ressel <aranea <AT> aixah <DOT> de> AuthorDate: Mon May 8 18:24:30 2017 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Thu May 18 17:01:53 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=5164572d chronyd: Allow init scripts to create /run/chrony Remark: So far, chronyd.fc only contains /run/chronyd, but chrony's default location is actually /run/chrony, so I've added that to the fc. This commit also fixes a bug in the fc: It said (/.*) instead of (/.*)? policy/modules/contrib/chronyd.fc | 2 +- policy/modules/contrib/chronyd.te | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/contrib/chronyd.fc b/policy/modules/contrib/chronyd.fc index 94b601fd..ca2747e7 100644 --- a/policy/modules/contrib/chronyd.fc +++ b/policy/modules/contrib/chronyd.fc @@ -14,7 +14,7 @@ /var/log/chrony(/.*)? gen_context(system_u:object_r:chronyd_var_log_t,s0) -/run/chronyd(/.*) gen_context(system_u:object_r:chronyd_var_run_t,s0) +/run/chronyd?(/.*)? gen_context(system_u:object_r:chronyd_var_run_t,s0) /run/chronyd\.pid -- gen_context(system_u:object_r:chronyd_var_run_t,s0) /run/chronyd\.sock -s gen_context(system_u:object_r:chronyd_var_run_t,s0) diff --git a/policy/modules/contrib/chronyd.te b/policy/modules/contrib/chronyd.te index 3e9a1c5b..62ddd0bf 100644 --- a/policy/modules/contrib/chronyd.te +++ b/policy/modules/contrib/chronyd.te @@ -28,7 +28,7 @@ type chronyd_var_log_t; logging_log_file(chronyd_var_log_t) type chronyd_var_run_t; -files_pid_file(chronyd_var_run_t) +init_daemon_pid_file(chronyd_var_run_t, dir, "chrony") ######################################## # From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <gentoo-commits+bounces-950646-garchives=archives.gentoo.org@lists.gentoo.org> Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 31615139694 for <garchives@archives.gentoo.org>; Thu, 18 May 2017 17:02:57 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 35BDCE0F0E; Thu, 18 May 2017 17:02:52 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 176D2E0F0E for <gentoo-commits@lists.gentoo.org>; Thu, 18 May 2017 17:02:42 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 966873416A6 for <gentoo-commits@lists.gentoo.org>; Thu, 18 May 2017 17:02:40 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 33CC87467 for <gentoo-commits@lists.gentoo.org>; Thu, 18 May 2017 17:02:38 +0000 (UTC) From: "Sven Vermeulen" <swift@gentoo.org> To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" <swift@gentoo.org> Message-ID: <1495126913.5164572d4f1c9c12bcad411349ee23f196dcc524.swift@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:swift commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/chronyd.fc policy/modules/contrib/chronyd.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: swift X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: 5164572d4f1c9c12bcad411349ee23f196dcc524 X-VCS-Branch: swift Date: Thu, 18 May 2017 17:02:38 +0000 (UTC) Precedence: bulk List-Post: <mailto:gentoo-commits@lists.gentoo.org> List-Help: <mailto:gentoo-commits+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org> X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 31fc5e0e-a991-4878-bade-cf2ce321d5a3 X-Archives-Hash: f8624c8b865a6179f71d6286ba6edcd3 Message-ID: <20170518170238.N-5os9KP2Ime__QI1rsHrWvSvFk-Tea3D3Cy2FbzMeE@z> commit: 5164572d4f1c9c12bcad411349ee23f196dcc524 Author: Luis Ressel <aranea <AT> aixah <DOT> de> AuthorDate: Mon May 8 18:24:30 2017 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Thu May 18 17:01:53 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=5164572d chronyd: Allow init scripts to create /run/chrony Remark: So far, chronyd.fc only contains /run/chronyd, but chrony's default location is actually /run/chrony, so I've added that to the fc. This commit also fixes a bug in the fc: It said (/.*) instead of (/.*)? policy/modules/contrib/chronyd.fc | 2 +- policy/modules/contrib/chronyd.te | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/contrib/chronyd.fc b/policy/modules/contrib/chronyd.fc index 94b601fd..ca2747e7 100644 --- a/policy/modules/contrib/chronyd.fc +++ b/policy/modules/contrib/chronyd.fc @@ -14,7 +14,7 @@ /var/log/chrony(/.*)? gen_context(system_u:object_r:chronyd_var_log_t,s0) -/run/chronyd(/.*) gen_context(system_u:object_r:chronyd_var_run_t,s0) +/run/chronyd?(/.*)? gen_context(system_u:object_r:chronyd_var_run_t,s0) /run/chronyd\.pid -- gen_context(system_u:object_r:chronyd_var_run_t,s0) /run/chronyd\.sock -s gen_context(system_u:object_r:chronyd_var_run_t,s0) diff --git a/policy/modules/contrib/chronyd.te b/policy/modules/contrib/chronyd.te index 3e9a1c5b..62ddd0bf 100644 --- a/policy/modules/contrib/chronyd.te +++ b/policy/modules/contrib/chronyd.te @@ -28,7 +28,7 @@ type chronyd_var_log_t; logging_log_file(chronyd_var_log_t) type chronyd_var_run_t; -files_pid_file(chronyd_var_run_t) +init_daemon_pid_file(chronyd_var_run_t, dir, "chrony") ######################################## #