Date: Mon, 30 Dec 2002 14:20:17 -0800 (PST) From: Brian Feldman <green@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 22952 for review Message-ID: <200212302220.gBUMKHnb083040@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=22952 Change 22952 by green@green_laptop_2 on 2002/12/30 14:19:58 Since FreeBSD does not use block files, utilize character files in some of the policies as well. Affected files ... .. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/initrc.te#3 edit .. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/login.te#2 edit .. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/quota.te#2 edit Differences ... ==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/initrc.te#3 (text+ko) ==== @@ -188,7 +188,7 @@ allow initrc_t apm_bios_t:chr_file { setattr getattr };') # Access /dev/fd0 (for kudzu). Need a separate domain for kudzu? -allow initrc_t removable_device_t:blk_file rw_file_perms; +allow initrc_t removable_device_t:{ blk_file chr_file } rw_file_perms; ifdef(`lpd.te', `# Read printconf files. ==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/login.te#2 (text+ko) ==== @@ -42,8 +42,8 @@ allow local_login_t sysadm_home_t:file r_file_perms; # Do not audit denied attempts to access devices. -dontaudit local_login_t fixed_disk_device_t:blk_file { getattr setattr }; -dontaudit local_login_t removable_device_t:blk_file { getattr setattr }; +dontaudit local_login_t fixed_disk_device_t:{ chr_file blk_file } { getattr setattr }; +dontaudit local_login_t removable_device_t:{ chr_file blk_file } { getattr setattr }; dontaudit local_login_t device_t:{ chr_file blk_file lnk_file } { getattr setattr }; dontaudit local_login_t misc_device_t:{ chr_file blk_file lnk_file } { getattr setattr }; dontaudit local_login_t framebuf_device_t:{ chr_file blk_file lnk_file } { getattr setattr read }; ==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/quota.te#2 (text+ko) ==== @@ -16,7 +16,7 @@ allow quota_t etc_runtime_t:file r_file_perms; allow quota_t device_t:dir r_dir_perms; -allow quota_t fixed_disk_device_t:blk_file getattr; +allow quota_t fixed_disk_device_t:{ blk_file chr_file } getattr; allow quota_t boot_t:dir r_dir_perms; To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200212302220.gBUMKHnb083040>