[gentoo-commits] proj/hardened-refpolicy:master commit in: /

["Sven Vermeulen" <sven.vermeulen@siphos.be>]

commit:     e592a2a8011ac03fd2fab1539983de735f798306
Author:     Dominick Grift <dominick.grift <AT> gmail <DOT> com>
AuthorDate: Sat Oct  6 14:22:39 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Sat Oct  6 17:02:45 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=e592a2a8

Changes to the dnssectrigger policy module

Remove duplicate rules
Needs to be able to create /etc/resolv.conf with a type transition

Signed-off-by: Dominick Grift <dominick.grift <AT> gmail.com>

---
 dnssectrigger.te |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/dnssectrigger.te b/dnssectrigger.te
index a87128f..ef36d73 100644
--- a/dnssectrigger.te
+++ b/dnssectrigger.te
@@ -1,4 +1,4 @@
-policy_module(dnssectrigger, 1.0.0)
+policy_module(dnssectrigger, 1.0.1)
 
 ########################################
 #
@@ -30,8 +30,7 @@ allow dnssec_triggerd_t self:capability linux_immutable;
 allow dnssec_triggerd_t self:process signal;
 allow dnssec_triggerd_t self:fifo_file rw_fifo_file_perms;
 allow dnssec_triggerd_t self:unix_stream_socket { accept listen };
-allow dnssec_triggerd_t self:tcp_socket create_stream_socket_perms;
-allow dnssec_triggerd_t self:udp_socket create_socket_perms;
+allow dnssec_triggerd_t self:tcp_socket { accept listen };
 
 allow dnssec_triggerd_t dnssec_trigger_conf_t:file read_file_perms;
 
@@ -72,6 +71,7 @@ miscfiles_read_localization(dnssec_triggerd_t)
 
 sysnet_dns_name_resolve(dnssec_triggerd_t)
 sysnet_manage_config(dnssec_triggerd_t)
+sysnet_etc_filetrans_config(dnssec_triggerd_t)
 
 optional_policy(`
 	bind_read_config(dnssec_triggerd_t)