Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
View | Details | Raw Unified | Return to bug 529332
Collapse All | Expand All

(-)a/policy/modules.conf (+7 lines)
Lines 1348-1353 openct = module Link Here
1348
openvpn = module
1348
openvpn = module
1349
1349
1350
# Layer: contrib
1350
# Layer: contrib
1351
# Module: openrc
1352
#
1353
# init subsystem
1354
# 
1355
openrc = module
1356
1357
# Layer: contrib
1351
# Module: pads
1358
# Module: pads
1352
#
1359
#
1353
# Passive Asset Detection System
1360
# Passive Asset Detection System
(-)a/policy/modules/contrib/openrc.te (+1 lines)
Lines 14-19 role system_r types openrc_cgroup_release_t; Link Here
14
#
14
#
15
15
16
allow openrc_cgroup_release_t self:unix_stream_socket create_socket_perms;
16
allow openrc_cgroup_release_t self:unix_stream_socket create_socket_perms;
17
allow openrc_cgroup_release_t self:capability dac_override;
17
18
18
kernel_domtrans_to(openrc_cgroup_release_t, openrc_cgroup_release_exec_t)
19
kernel_domtrans_to(openrc_cgroup_release_t, openrc_cgroup_release_exec_t)
19
kernel_read_system_state(openrc_cgroup_release_t)
20
kernel_read_system_state(openrc_cgroup_release_t)
(-)a/policy/modules/system/selinuxutil.te (+5 lines)
Lines 91-101 type restorecond_var_run_t; Link Here
91
files_pid_file(restorecond_var_run_t)
91
files_pid_file(restorecond_var_run_t)
92
92
93
type run_init_t;
93
type run_init_t;
94
95
init_domtrans(run_init_t)
96
init_getattr_script_status_files(run_init_t)
97
94
type run_init_exec_t;
98
type run_init_exec_t;
95
application_domain(run_init_t, run_init_exec_t)
99
application_domain(run_init_t, run_init_exec_t)
96
domain_system_change_exemption(run_init_t)
100
domain_system_change_exemption(run_init_t)
97
role run_init_roles types run_init_t;
101
role run_init_roles types run_init_t;
98
102
103
99
type semanage_t;
104
type semanage_t;
100
type semanage_exec_t;
105
type semanage_exec_t;
101
application_domain(semanage_t, semanage_exec_t)
106
application_domain(semanage_t, semanage_exec_t)

Return to bug 529332