加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
文件
该仓库未声明开源许可证文件(LICENSE),使用请关注具体项目描述及其代码上游依赖。
克隆/下载
backport-Create-chronyd_pid_filetrans-interface.patch 1.27 KB
一键复制 编辑 原始数据 按行查看 历史
luhuaxin 提交于 2021-05-31 16:38 . backport some upstream patches
From 25d2a5c01c34d72c20f5d219227ad87897411967 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Wed, 14 Oct 2020 22:41:52 +0200
Reference: https://github.com/fedora-selinux/selinux-policy/commit/25d2a5c01c34d72c20f5d219227ad87897411967
Conflict: NA
Subject: [PATCH] Create chronyd_pid_filetrans() interface
---
policy/modules/contrib/chronyd.if | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
diff --git a/policy/modules/contrib/chronyd.if b/policy/modules/contrib/chronyd.if
index c1b1b71..3d47264 100644
--- a/policy/modules/contrib/chronyd.if
+++ b/policy/modules/contrib/chronyd.if
@@ -236,6 +236,25 @@ interface(`chronyd_manage_pid',`
manage_dirs_pattern($1, chronyd_var_run_t, chronyd_var_run_t)
')
+######################################
+## <summary>
+## Create objects in /var/run
+## with chronyd runtime private file type.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`chronyd_pid_filetrans',`
+ gen_require(`
+ type chronyd_var_run_t;
+ ')
+
+ files_pid_filetrans($1, chronyd_var_run_t, dir, "chrony-dhcp")
+')
+
####################################
## <summary>
## All of the rules required to
--
1.8.3.1
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化