Re: [PATCH 1/4] portage: Dontaudit setattr in portage_dontaudit_write_cache

Jason Zaman <[email protected]> Sun, 18 Oct 2015 01:03:36 +0800
Newsgroups gmane.linux.gentoo.hardened
Message-ID <20151017170336.GA27847@meriadoc>
On Thu, Oct 15, 2015 at 12:44:40PM +0200, Luis Ressel wrote:
> ---
>  policy/modules/contrib/portage.if | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/policy/modules/contrib/portage.if b/policy/modules/contrib/portage.if
> index 640a63b..c98a763 100644
> --- a/policy/modules/contrib/portage.if
> +++ b/policy/modules/contrib/portage.if
> @@ -511,6 +511,6 @@ interface(`portage_dontaudit_write_cache',`
>  		type portage_cache_t;
>  	')
>  
> -	dontaudit $1 portage_cache_t:dir { write };
> +	dontaudit $1 portage_cache_t:dir { setattr write };
>  ')
>  
> -- 
> 2.6.1

Applied this set, thanks!

-- Jason