diff options
| author | Nathan Kinder <nkinder@redhat.com> | 2010-07-29 15:16:44 -0700 |
|---|---|---|
| committer | Nathan Kinder <nkinder@redhat.com> | 2010-08-03 10:34:47 -0700 |
| commit | b0b88c2096d02821060bd1b69c9ba675cd26adc3 (patch) | |
| tree | c9e8f9d579c8a00f42e3ca35771731114fe9f72c /selinux/dirsrv.te | |
| parent | f87b2ba449659fc2dfb934a90c73a5279db5a4b1 (diff) | |
| download | ds-b0b88c2096d02821060bd1b69c9ba675cd26adc3.tar.gz ds-b0b88c2096d02821060bd1b69c9ba675cd26adc3.tar.xz ds-b0b88c2096d02821060bd1b69c9ba675cd26adc3.zip | |
Bug 594745 - Get rid of dirsrv_lib_t label
The dirsrv_lib_t label used to label the dirsrv libraries is causing
AVCs to occur from prelink. It turns out that the dirsrv_lib_t
label is not really necessary. We can just allow our libraries to
use the default label of lib_t.
Diffstat (limited to 'selinux/dirsrv.te')
| -rw-r--r-- | selinux/dirsrv.te | 9 |
1 files changed, 0 insertions, 9 deletions
diff --git a/selinux/dirsrv.te b/selinux/dirsrv.te index e24ca933..d9c810dc 100644 --- a/selinux/dirsrv.te +++ b/selinux/dirsrv.te @@ -25,10 +25,6 @@ type dirsrv_snmp_exec_t; domain_type(dirsrv_snmp_t) init_daemon_domain(dirsrv_snmp_t, dirsrv_snmp_exec_t) -# dynamic libraries -type dirsrv_lib_t; -files_type(dirsrv_lib_t) - # var/lib files type dirsrv_var_lib_t; files_type(dirsrv_var_lib_t) @@ -93,11 +89,6 @@ allow dirsrv_t self:sem all_sem_perms; manage_files_pattern(dirsrv_t, dirsrv_tmpfs_t, dirsrv_tmpfs_t) fs_tmpfs_filetrans(dirsrv_t, dirsrv_tmpfs_t, file) -# dynamic libraries -allow dirsrv_t dirsrv_lib_t:file exec_file_perms; -allow dirsrv_t dirsrv_lib_t:lnk_file read_lnk_file_perms; -allow dirsrv_t dirsrv_lib_t:dir search_dir_perms; - # var/lib files for dirsrv manage_files_pattern(dirsrv_t, dirsrv_var_lib_t, dirsrv_var_lib_t) manage_dirs_pattern(dirsrv_t, dirsrv_var_lib_t, dirsrv_var_lib_t) |