[PATCH] refpolicy: system_lvm changes

New directory for cache file
Interacts with xen
runs modutils
creates tmp files in /dev

• nsaserefpolicy/policy/modules/system/lvm.fc 2007-05-29 14:10:58.000000000 -0400
  +++ serefpolicy-3.0.5/policy/modules/system/lvm.fc 2007-08-02 11:02:02.000000000 -0400
  @@ -15,6 +15,7 @@ # /etc/lvm(/.*)? gen_context(system_u:object_r:lvm_etc_t,s0) /etc/lvm/\.cache -- gen_context(system_u:object_r:lvm_metadata_t,s0)
  +/etc/lvm/cache(/.*)? gen_context(system_u:object_r:lvm_metadata_t,s0)
  /etc/lvm/archive(/.*)? gen_context(system_u:object_r:lvm_metadata_t,s0) /etc/lvm/backup(/.*)? gen_context(system_u:object_r:lvm_metadata_t,s0) /etc/lvm/lock(/.*)? gen_context(system_u:object_r:lvm_lock_t,s0) @@ -228,6 +231,8 @@ dev_dontaudit_getattr_generic_blk_files(lvm_t) dev_dontaudit_getattr_generic_pipes(lvm_t) dev_create_generic_dirs(lvm_t)
  +dev_delete_generic_dirs(lvm_t)
  +dev_rw_generic_files(lvm_t)
  

 fs_getattr_xattr_fs(lvm_t)
 fs_search_auto_mountpoints(lvm_t)
@@ -246,6 +251,7 @@
 storage_dev_filetrans_fixed_disk(lvm_t)  # Access raw devices and old /dev/lvm (c 109,0). Is this needed?  storage_manage_fixed_disk(lvm_t)
+mls_file_read_up(lvm_t)
 

 term_getattr_all_user_ttys(lvm_t)
 term_list_ptys(lvm_t)
@@ -293,5 +299,15 @@
 ')  

 optional_policy(`
+ modutils_domtrans_insmod(lvm_t)
+')
+
+optional_policy(`

         udev_read_db(lvm_t)
 ')
+
+optional_policy(`
+ xen_append_log(lvm_t)
+ xen_dontaudit_rw_unix_stream_sockets(lvm_t)
+')
+
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.

• This message: [ Message body ]
• Next message: Eamon Walsh: "Re: [PATCH] kernel: selinux: policy selectable handling of unknown classes and perms"
• Previous message: dwalsh_at_nospam: "[PATCH] refpolicy: system_modutils changes"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]