diff options
| author |   Dominick Grift <dominick.grift@gmail.com> | 2012-10-05 19:10:11 +0200 |
|---|---|---|
| committer |   Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-10-06 17:53:08 +0200 |
| commit | 09c6c156df57087c0541ea48cf809baca889472e (patch) | |
| tree | 472060c0cad3b997d2a626280d8e48a718d969e1 /policy/modules/contrib/bind.te | |
| parent | changes to the mandb policy module (diff) | |
| download | hardened-refpolicy-09c6c156df57087c0541ea48cf809baca889472e.tar.gz hardened-refpolicy-09c6c156df57087c0541ea48cf809baca889472e.tar.bz2 hardened-refpolicy-09c6c156df57087c0541ea48cf809baca889472e.zip | |
Changes to the dbus policy module
Declare a session_dbusd_home_t userdom user home content type and label
$HOME/\.dbus accordingly
Allow dbus_role_template callers to manage and relabel session dbusd
content in tmp and and user home.
Allow session_bus_type to manage session dbusd content in user home
Bind, policykit_auth and dhcpc are dbus system domains
Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Diffstat (limited to 'policy/modules/contrib/bind.te')
| -rw-r--r-- | policy/modules/contrib/bind.te | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/policy/modules/contrib/bind.te b/policy/modules/contrib/bind.te index 03790cc8..481da8c5 100644 --- a/policy/modules/contrib/bind.te +++ b/policy/modules/contrib/bind.te @@ -1,4 +1,4 @@ -policy_module(bind, 1.12.5) +policy_module(bind, 1.12.6) ######################################## # @@ -169,13 +169,12 @@ tunable_policy(`named_write_master_zones',` ') optional_policy(` + dbus_system_domain(named_t, named_exec_t) + init_dbus_chat_script(named_t) sysnet_dbus_chat_dhcpc(named_t) - dbus_system_bus_client(named_t) - dbus_connect_system_bus(named_t) - optional_policy(` networkmanager_dbus_chat(named_t) ') |