* [gentoo-commits] gentoo-x86 commit in sec-policy/selinux-courier/files: fix-services-courier-r1.patch
@ 2011-03-07 2:32 Anthony G. Basile (blueness)
0 siblings, 0 replies; only message in thread
From: Anthony G. Basile (blueness) @ 2011-03-07 2:32 UTC (permalink / raw
To: gentoo-commits
blueness 11/03/07 02:32:30
Added: fix-services-courier-r1.patch
Log:
Renaming policy for courier-imap to match upstream naming standards.
(Portage version: 2.1.9.25/cvs/Linux x86_64)
Revision Changes Path
1.1 sec-policy/selinux-courier/files/fix-services-courier-r1.patch
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sec-policy/selinux-courier/files/fix-services-courier-r1.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/sec-policy/selinux-courier/files/fix-services-courier-r1.patch?rev=1.1&content-type=text/plain
Index: fix-services-courier-r1.patch
===================================================================
--- services/courier.te 2010-12-13 15:11:02.000000000 +0100
+++ services/courier.te 2011-03-03 16:27:16.660999997 +0100
@@ -37,7 +37,7 @@
#
allow courier_authdaemon_t self:capability { setuid setgid sys_tty_config };
-allow courier_authdaemon_t self:unix_stream_socket connectto;
+allow courier_authdaemon_t self:unix_stream_socket { create_stream_socket_perms connectto };
can_exec(courier_authdaemon_t, courier_exec_t)
@@ -52,7 +52,9 @@
allow courier_authdaemon_t courier_tcpd_t:tcp_socket rw_stream_socket_perms;
allow courier_authdaemon_t courier_tcpd_t:fifo_file rw_file_perms;
+manage_dirs_pattern(courier_authdaemon_t, courier_var_lib_t, courier_var_lib_t)
manage_sock_files_pattern(courier_authdaemon_t, courier_spool_t, courier_spool_t)
+manage_sock_files_pattern(courier_authdaemon_t, courier_var_lib_t, courier_var_lib_t)
files_search_spool(courier_authdaemon_t)
corecmd_search_bin(courier_authdaemon_t)
--- services/courier.fc 2010-08-03 15:11:05.000000000 +0200
+++ services/courier.fc 2011-03-03 16:36:53.994999997 +0100
@@ -5,8 +5,10 @@
/usr/sbin/courierlogger -- gen_context(system_u:object_r:courier_exec_t,s0)
/usr/sbin/courierldapaliasd -- gen_context(system_u:object_r:courier_exec_t,s0)
/usr/sbin/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
-
-/usr/lib(64)?/courier/authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
+ifdef(`distro_gentoo',`
+/usr/lib(64)?/courier-imap/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
+')
+/usr/lib(64)?/courier/(courier-)?authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
/usr/lib(64)?/courier/courier/.* -- gen_context(system_u:object_r:courier_exec_t,s0)
/usr/lib(64)?/courier/courier/courierpop.* -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
/usr/lib(64)?/courier/courier/imaplogin -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
@@ -16,9 +18,9 @@
/usr/lib(64)?/courier/rootcerts(/.*)? gen_context(system_u:object_r:courier_etc_t,s0)
/usr/lib(64)?/courier/sqwebmail/cleancache\.pl -- gen_context(system_u:object_r:sqwebmail_cron_exec_t,s0)
-/var/lib/courier(/.*)? -- gen_context(system_u:object_r:courier_var_lib_t,s0)
+/var/lib/courier(/.*)? gen_context(system_u:object_r:courier_var_lib_t,s0)
-/var/run/courier(/.*)? -- gen_context(system_u:object_r:courier_var_run_t,s0)
+/var/run/courier(/.*)? gen_context(system_u:object_r:courier_var_run_t,s0)
/var/spool/authdaemon(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
/var/spool/courier(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2011-03-07 2:32 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-03-07 2:32 [gentoo-commits] gentoo-x86 commit in sec-policy/selinux-courier/files: fix-services-courier-r1.patch Anthony G. Basile (blueness)
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox