From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <gentoo-commits+bounces-941724-garchives=archives.gentoo.org@lists.gentoo.org> Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 29F9A139694 for <garchives@archives.gentoo.org>; Thu, 30 Mar 2017 17:09:15 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8E6A6234029; Thu, 30 Mar 2017 17:09:04 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 6EA15234029 for <gentoo-commits@lists.gentoo.org>; Thu, 30 Mar 2017 17:09:04 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 98C9434164C for <gentoo-commits@lists.gentoo.org>; Thu, 30 Mar 2017 17:09:03 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 1F59973E8 for <gentoo-commits@lists.gentoo.org>; Thu, 30 Mar 2017 17:09:01 +0000 (UTC) From: "Jason Zaman" <perfinion@gentoo.org> To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jason Zaman" <perfinion@gentoo.org> Message-ID: <1490882410.66330450e5ece7ebc512aae878d224b772efd252.perfinion@gentoo> Subject: [gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/contrib/ X-VCS-Repository: proj/hardened-refpolicy X-VCS-Files: policy/modules/contrib/xfs.if policy/modules/contrib/xfs.te X-VCS-Directories: policy/modules/contrib/ X-VCS-Committer: perfinion X-VCS-Committer-Name: Jason Zaman X-VCS-Revision: 66330450e5ece7ebc512aae878d224b772efd252 X-VCS-Branch: next Date: Thu, 30 Mar 2017 17:09:01 +0000 (UTC) Precedence: bulk List-Post: <mailto:gentoo-commits@lists.gentoo.org> List-Help: <mailto:gentoo-commits+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org> X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 5a57bac7-d97c-4c2f-ac95-f91f6893b5b9 X-Archives-Hash: c026757a6b2764436e9dfa9b24cc0ad2 Message-ID: <20170330170901.UvbzUbnPP5A4_FK77hO5PTqqBPS9s5QHkb4lJAw6qbc@z> commit: 66330450e5ece7ebc512aae878d224b772efd252 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> AuthorDate: Tue Mar 28 22:50:35 2017 +0000 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org> CommitDate: Thu Mar 30 14:00:10 2017 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=66330450 systemd-resolvd, sessions, and tmpfiles take2 I believe that I have addressed all the issues Chris raised, so here's a newer version of the patch which applies to today's git version. Description: systemd-resolved, sessions, and tmpfiles patches Author: Russell Coker <russell <AT> coker.com.au> Last-Update: 2017-03-26 policy/modules/contrib/xfs.if | 19 +++++++++++++++++++ policy/modules/contrib/xfs.te | 2 +- 2 files changed, 20 insertions(+), 1 deletion(-) diff --git a/policy/modules/contrib/xfs.if b/policy/modules/contrib/xfs.if index 19934060..1aafbbc1 100644 --- a/policy/modules/contrib/xfs.if +++ b/policy/modules/contrib/xfs.if @@ -60,6 +60,25 @@ interface(`xfs_exec',` ######################################## ## <summary> +## Create xfs temporary dirs +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`xfs_create_tmp_dirs',` + gen_require(` + type xfs_tmp_t; + ') + + files_search_tmp($1) + allow $1 xfs_tmp_t:dir create; +') + +######################################## +## <summary> ## All of the rules required to ## administrate an xfs environment. ## </summary> diff --git a/policy/modules/contrib/xfs.te b/policy/modules/contrib/xfs.te index 3fc2a1bf..839f15cf 100644 --- a/policy/modules/contrib/xfs.te +++ b/policy/modules/contrib/xfs.te @@ -1,4 +1,4 @@ -policy_module(xfs, 1.9.0) +policy_module(xfs, 1.9.1) ######################################## #