From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <gentoo-commits+bounces-907903-garchives=archives.gentoo.org@lists.gentoo.org> Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id C05FB138C92 for <garchives@archives.gentoo.org>; Mon, 24 Oct 2016 16:03:50 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 979F821C039; Mon, 24 Oct 2016 16:03:06 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 82FC921C039 for <gentoo-commits@lists.gentoo.org>; Mon, 24 Oct 2016 16:03:06 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id A6F9E34165F for <gentoo-commits@lists.gentoo.org>; Mon, 24 Oct 2016 16:03:05 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 154F024A4 for <gentoo-commits@lists.gentoo.org>; Mon, 24 Oct 2016 16:03:04 +0000 (UTC) From: "Sven Vermeulen" <swift@gentoo.org> To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" <swift@gentoo.org> Message-ID: <1477324662.2643b904b25db0560e375d37753018c0cd561cc0.swift@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/webalizer.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: swift X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: 2643b904b25db0560e375d37753018c0cd561cc0 X-VCS-Branch: next Date: Mon, 24 Oct 2016 16:03:04 +0000 (UTC) Precedence: bulk List-Post: <mailto:gentoo-commits@lists.gentoo.org> List-Help: <mailto:gentoo-commits+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org> X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 3535a8e4-4c9a-4f7d-849b-8fd52fe76fe1 X-Archives-Hash: 44e8d902b40ae7b9e9fca060afe03650 Message-ID: <20161024160304.zAkZgKIBGakhqi3OAGVbEGz7mI1G7m-RpO5VaKurCv0@z> commit: 2643b904b25db0560e375d37753018c0cd561cc0 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> AuthorDate: Wed Oct 19 22:57:38 2016 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Mon Oct 24 15:57:42 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=2643b904 webalizer: Rearrange a couple lines. Signed-off-by: Sven Vermeulen <sven.vermeulen <AT> siphos.be> policy/modules/contrib/webalizer.te | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/contrib/webalizer.te b/policy/modules/contrib/webalizer.te index ff69b41..5e0a9e6 100644 --- a/policy/modules/contrib/webalizer.te +++ b/policy/modules/contrib/webalizer.te @@ -36,7 +36,6 @@ allow webalizer_t self:unix_stream_socket { accept connectto listen }; allow webalizer_t self:tcp_socket { accept listen }; allow webalizer_t webalizer_etc_t:file read_file_perms; -files_read_usr_files(webalizer_t) manage_dirs_pattern(webalizer_t, webalizer_tmp_t, webalizer_tmp_t) manage_files_pattern(webalizer_t, webalizer_tmp_t, webalizer_tmp_t) @@ -51,7 +50,7 @@ kernel_read_kernel_sysctls(webalizer_t) kernel_read_system_state(webalizer_t) files_read_etc_runtime_files(webalizer_t) -miscfiles_read_fonts(webalizer_t) +files_read_usr_files(webalizer_t) fs_search_auto_mountpoints(webalizer_t) fs_getattr_xattr_fs(webalizer_t) @@ -64,6 +63,7 @@ logging_send_syslog_msg(webalizer_t) miscfiles_read_localization(webalizer_t) miscfiles_read_public_files(webalizer_t) +miscfiles_read_fonts(webalizer_t) userdom_use_user_terminals(webalizer_t) userdom_use_unpriv_users_fds(webalizer_t)