From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 4ACC4139694 for ; Thu, 30 Mar 2017 17:06:47 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B32E62241A1; Thu, 30 Mar 2017 17:06:35 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 8E4C72241A2 for ; Thu, 30 Mar 2017 17:06:25 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 7638534163E for ; Thu, 30 Mar 2017 17:06:24 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id B3EF573E7 for ; Thu, 30 Mar 2017 17:06:21 +0000 (UTC) From: "Jason Zaman" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" Message-ID: <1490882318.0706c6d28350a9527ea67ae09b47fcf7ac3f0dc6.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/vnstatd.if policy/modules/contrib/vnstatd.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 0706c6d28350a9527ea67ae09b47fcf7ac3f0dc6 X-VCS-Branch: master Date: Thu, 30 Mar 2017 17:06:21 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 382f2cb1-7574-4cbe-bf54-6e847bcd253f X-Archives-Hash: 21be57abd52fb023d36d16f3484ba9d8 commit: 0706c6d28350a9527ea67ae09b47fcf7ac3f0dc6 Author: cgzones googlemail com> AuthorDate: Wed Mar 8 18:34:49 2017 +0000 Commit: Jason Zaman gentoo org> CommitDate: Thu Mar 30 13:58:38 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=0706c6d2 vnstatd: update use userdom_use_inherited_user_terminals() deprecate interfaces: - transition to daemon domain - access to binary lib files policy/modules/contrib/vnstatd.if | 10 ++++++++++ policy/modules/contrib/vnstatd.te | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/policy/modules/contrib/vnstatd.if b/policy/modules/contrib/vnstatd.if index 2d863cb2..ee614638 100644 --- a/policy/modules/contrib/vnstatd.if +++ b/policy/modules/contrib/vnstatd.if @@ -56,6 +56,8 @@ interface(`vnstatd_run_vnstat',` ## # interface(`vnstatd_domtrans',` + refpolicywarn(`$0($*) has been deprecated') + gen_require(` type vnstatd_t, vnstatd_exec_t; ') @@ -75,6 +77,8 @@ interface(`vnstatd_domtrans',` ## # interface(`vnstatd_search_lib',` + refpolicywarn(`$0($*) has been deprecated') + gen_require(` type vnstatd_var_lib_t; ') @@ -95,6 +99,8 @@ interface(`vnstatd_search_lib',` ## # interface(`vnstatd_manage_lib_dirs',` + refpolicywarn(`$0($*) has been deprecated') + gen_require(` type vnstatd_var_lib_t; ') @@ -114,6 +120,8 @@ interface(`vnstatd_manage_lib_dirs',` ## # interface(`vnstatd_read_lib_files',` + refpolicywarn(`$0($*) has been deprecated') + gen_require(` type vnstatd_var_lib_t; ') @@ -134,6 +142,8 @@ interface(`vnstatd_read_lib_files',` ## # interface(`vnstatd_manage_lib_files',` + refpolicywarn(`$0($*) has been deprecated') + gen_require(` type vnstatd_var_lib_t; ') diff --git a/policy/modules/contrib/vnstatd.te b/policy/modules/contrib/vnstatd.te index 46419e83..69a93d0b 100644 --- a/policy/modules/contrib/vnstatd.te +++ b/policy/modules/contrib/vnstatd.te @@ -91,7 +91,7 @@ miscfiles_read_localization(vnstat_t) userdom_dontaudit_search_user_home_dirs(vnstat_t) -userdom_use_user_terminals(vnstat_t) +userdom_use_inherited_user_terminals(vnstat_t) optional_policy(` cron_system_entry(vnstat_t, vnstat_exec_t)