From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id DB4B413888F for ; Mon, 26 Oct 2015 05:36:46 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 5467DE0817; Mon, 26 Oct 2015 05:36:40 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B128CE080E for ; Mon, 26 Oct 2015 05:36:39 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id E3BF2340AC7 for ; Mon, 26 Oct 2015 05:36:38 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id B06DB1938 for ; Mon, 26 Oct 2015 05:36:35 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1445831752.360b075cbb2c37b12a039e12d4ac0f6d68c2e0f8.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/logging.te policy/modules/system/lvm.te policy/modules/system/udev.te X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 360b075cbb2c37b12a039e12d4ac0f6d68c2e0f8 X-VCS-Branch: next Date: Mon, 26 Oct 2015 05:36:35 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 01171e20-f1c7-487b-9a07-a3093608fd15 X-Archives-Hash: 6f4316723aaf5b938d444c9ec8f0cd15 commit: 360b075cbb2c37b12a039e12d4ac0f6d68c2e0f8 Author: Chris PeBenito tresys com> AuthorDate: Tue Oct 20 17:25:57 2015 +0000 Commit: Jason Zaman gentoo org> CommitDate: Mon Oct 26 03:55:52 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=360b075c Add refpolicy core socket-activated services. policy/modules/system/logging.te | 1 + policy/modules/system/lvm.te | 1 + policy/modules/system/udev.te | 1 + 3 files changed, 3 insertions(+) diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te index fd941ab..ef56179 100644 --- a/policy/modules/system/logging.te +++ b/policy/modules/system/logging.te @@ -67,6 +67,7 @@ files_config_file(syslog_conf_t) type syslogd_t; type syslogd_exec_t; init_daemon_domain(syslogd_t, syslogd_exec_t) +init_named_socket_activation(syslogd_t, syslogd_var_run_t) type syslogd_initrc_exec_t; init_script_file(syslogd_initrc_exec_t) diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te index 61bd92b..d15ea3c 100644 --- a/policy/modules/system/lvm.te +++ b/policy/modules/system/lvm.te @@ -18,6 +18,7 @@ files_pid_file(clvmd_var_run_t) type lvm_t; type lvm_exec_t; init_system_domain(lvm_t, lvm_exec_t) +init_named_socket_activation(lvm_t, lvm_var_run_t) # needs privowner because it assigns the identity system_u to device nodes # but runs as the identity of the sysadmin domain_obj_id_change_exemption(lvm_t) diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te index 40868ad..c9091f3 100644 --- a/policy/modules/system/udev.te +++ b/policy/modules/system/udev.te @@ -13,6 +13,7 @@ domain_obj_id_change_exemption(udev_t) domain_entry_file(udev_t, udev_helper_exec_t) domain_interactive_fd(udev_t) init_daemon_domain(udev_t, udev_exec_t) +init_named_socket_activation(udev_t, udev_var_run_t) type udev_etc_t alias etc_udev_t; files_config_file(udev_etc_t) From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 82B3913888F for ; Mon, 26 Oct 2015 05:48:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CD02D21C006; Mon, 26 Oct 2015 05:48:42 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 924B7E0802 for ; Mon, 26 Oct 2015 05:48:41 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id D41C3340AF1 for ; Mon, 26 Oct 2015 05:48:40 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id D839D1938 for ; Mon, 26 Oct 2015 05:48:37 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1445831752.360b075cbb2c37b12a039e12d4ac0f6d68c2e0f8.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/system/logging.te policy/modules/system/lvm.te policy/modules/system/udev.te X-VCS-Directories: policy/modules/system/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 360b075cbb2c37b12a039e12d4ac0f6d68c2e0f8 X-VCS-Branch: master Date: Mon, 26 Oct 2015 05:48:37 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: db7f51db-6528-4ce4-a9ee-5e73ae2cce2a X-Archives-Hash: 6e399adb9ba8301609a224b4bb018010 Message-ID: <20151026054837.vXoOKu1MoWJ-RoXrw5GK85BVQYuxOFu8OgJBlwdJfzE@z> commit: 360b075cbb2c37b12a039e12d4ac0f6d68c2e0f8 Author: Chris PeBenito tresys com> AuthorDate: Tue Oct 20 17:25:57 2015 +0000 Commit: Jason Zaman gentoo org> CommitDate: Mon Oct 26 03:55:52 2015 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=360b075c Add refpolicy core socket-activated services. policy/modules/system/logging.te | 1 + policy/modules/system/lvm.te | 1 + policy/modules/system/udev.te | 1 + 3 files changed, 3 insertions(+) diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te index fd941ab..ef56179 100644 --- a/policy/modules/system/logging.te +++ b/policy/modules/system/logging.te @@ -67,6 +67,7 @@ files_config_file(syslog_conf_t) type syslogd_t; type syslogd_exec_t; init_daemon_domain(syslogd_t, syslogd_exec_t) +init_named_socket_activation(syslogd_t, syslogd_var_run_t) type syslogd_initrc_exec_t; init_script_file(syslogd_initrc_exec_t) diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te index 61bd92b..d15ea3c 100644 --- a/policy/modules/system/lvm.te +++ b/policy/modules/system/lvm.te @@ -18,6 +18,7 @@ files_pid_file(clvmd_var_run_t) type lvm_t; type lvm_exec_t; init_system_domain(lvm_t, lvm_exec_t) +init_named_socket_activation(lvm_t, lvm_var_run_t) # needs privowner because it assigns the identity system_u to device nodes # but runs as the identity of the sysadmin domain_obj_id_change_exemption(lvm_t) diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te index 40868ad..c9091f3 100644 --- a/policy/modules/system/udev.te +++ b/policy/modules/system/udev.te @@ -13,6 +13,7 @@ domain_obj_id_change_exemption(udev_t) domain_entry_file(udev_t, udev_helper_exec_t) domain_interactive_fd(udev_t) init_daemon_domain(udev_t, udev_exec_t) +init_named_socket_activation(udev_t, udev_var_run_t) type udev_etc_t alias etc_udev_t; files_config_file(udev_etc_t)