Re: [PATCH] new version of filetrans patch

Russell Coker <[email protected]>
Newsgroups org.kernel.vger.selinux-refpolicy
Message-ID <2243812.pyNZXzfhlh@liv>
On Wednesday, 3 February 2021 12:49:07 AM AEDT Chris PeBenito wrote:
> > Name changes suggested by Dominick and some more additions.
> > 
> > Signed-off-by: Russell Coker <[email protected]>
> 
> Merged, though I renamed some interfaces and dropped a block that didn't
> apply since it's so close to the merge window closing.

+interface(`systemd_run_passwd_agent',`
+       gen_require(`
+               type systemd_passwd_agent_t, systemd_passwd_agent_exec_t;
+       ')
+
+       domain_auto_transition_pattern($1, systemd_passwd_agent_exec_t, 
systemd_passwd_agent_t)
+       allow systemd_passwd_agent_t $1:fd use;
+       role $2 types systemd_passwd_agent_t;
+')

Why did you change the above to the below?  It needs an auto trans.

interface(`systemd_run_passwd_agent',`
        gen_require(`
                type systemd_passwd_agent_t, systemd_passwd_agent_exec_t;
        ')

        domtrans_pattern($1, systemd_passwd_agent_exec_t, 
systemd_passwd_agent_t)
        allow systemd_passwd_agent_t $1:fd use;
        role $2 types systemd_passwd_agent_t;
')


-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.