diff options
| author | Chris PeBenito <cpebenito@tresys.com> | 2009-08-05 10:19:28 -0400 |
|---|---|---|
| committer | Chris PeBenito <cpebenito@tresys.com> | 2009-08-05 10:19:28 -0400 |
| commit | 48bf6397fc4d733cba3350d0e19c42bc63c435d5 (patch) | |
| tree | 53a53e1e27b16dc5dc3a54cf416d534dcfe7d162 /policy | |
| parent | 4b218bd6462b44e8692da7122c3379a25073525b (diff) | |
fix ordering in raid.
Diffstat (limited to 'policy')
| -rw-r--r-- | policy/modules/system/raid.te | 24 |
1 files changed, 12 insertions, 12 deletions
diff --git a/policy/modules/system/raid.te b/policy/modules/system/raid.te index 91f12595..24a899c4 100644 --- a/policy/modules/system/raid.te +++ b/policy/modules/system/raid.te @@ -32,6 +32,10 @@ kernel_read_kernel_sysctls(mdadm_t) kernel_rw_software_raid_state(mdadm_t) kernel_getattr_core_if(mdadm_t) +# Helper program access +corecmd_exec_bin(mdadm_t) +corecmd_exec_shell(mdadm_t) + dev_read_sysfs(mdadm_t) # Ignore attempts to read every device file dev_dontaudit_getattr_all_blk_files(mdadm_t) @@ -41,28 +45,24 @@ dev_dontaudit_getattr_generic_chr_files(mdadm_t) dev_dontaudit_getattr_generic_blk_files(mdadm_t) dev_read_realtime_clock(mdadm_t) +domain_use_interactive_fds(mdadm_t) + +files_read_etc_files(mdadm_t) +files_read_etc_runtime_files(mdadm_t) + fs_search_auto_mountpoints(mdadm_t) fs_dontaudit_list_tmpfs(mdadm_t) +mls_file_read_all_levels(mdadm_t) +mls_file_write_all_levels(mdadm_t) + # RAID block device access storage_manage_fixed_disk(mdadm_t) storage_dev_filetrans_fixed_disk(mdadm_t) storage_read_scsi_generic(mdadm_t) -mls_file_read_all_levels(mdadm_t) -mls_file_write_all_levels(mdadm_t) - term_dontaudit_list_ptys(mdadm_t) -# Helper program access -corecmd_exec_bin(mdadm_t) -corecmd_exec_shell(mdadm_t) - -domain_use_interactive_fds(mdadm_t) - -files_read_etc_files(mdadm_t) -files_read_etc_runtime_files(mdadm_t) - init_dontaudit_getattr_initctl(mdadm_t) logging_send_syslog_msg(mdadm_t) |