|
 |
090c79 |
From fb4c274f4857f2d652014b0189abafb1df4b001a Mon Sep 17 00:00:00 2001
|
|
|
090c79 |
From: Steve Grubb <sgrubb@redhat.com>
|
|
|
090c79 |
Date: Tue, 19 Jul 2022 12:18:18 -0400
|
|
|
090c79 |
Subject: [PATCH] Add documentation describing support for user/group names
|
|
|
090c79 |
|
|
|
090c79 |
---
|
|
|
090c79 |
doc/fapolicyd.rules.5 | 6 +++---
|
|
|
090c79 |
init/fapolicyd.service | 2 ++
|
|
|
090c79 |
2 files changed, 5 insertions(+), 3 deletions(-)
|
|
|
090c79 |
|
|
|
090c79 |
diff --git a/doc/fapolicyd.rules.5 b/doc/fapolicyd.rules.5
|
|
|
090c79 |
index aa77177..3b8ec09 100644
|
|
|
090c79 |
--- a/doc/fapolicyd.rules.5
|
|
|
090c79 |
+++ b/doc/fapolicyd.rules.5
|
|
|
090c79 |
@@ -35,13 +35,13 @@ The subject is the process that is performing actions on system resources. The f
|
|
|
090c79 |
This matches against any subject. When used, this must be the only subject in the rule.
|
|
|
090c79 |
.TP
|
|
|
090c79 |
.B auid
|
|
|
090c79 |
-This is the login uid that the audit system assigns users when they log in to the system. Daemons have a value of -1.
|
|
|
090c79 |
+This is the login uid that the audit system assigns users when they log in to the system. Daemons have a value of -1. The given value may be numeric or the account name.
|
|
|
090c79 |
.TP
|
|
|
090c79 |
.B uid
|
|
|
090c79 |
-This is the user id that the program is running under.
|
|
|
090c79 |
+This is the user id that the program is running under. The given value may be numeric or the account name.
|
|
|
090c79 |
.TP
|
|
|
090c79 |
.B gid
|
|
|
090c79 |
-This is the group id that the program is running under.
|
|
|
090c79 |
+This is the group id that the program is running under. The given value may be numeric or the group name.
|
|
|
090c79 |
.TP
|
|
|
090c79 |
.B sessionid
|
|
|
090c79 |
This is the numeric session id that the audit system assigns to users when they log in. Daemons have a value of -1.
|
|
|
090c79 |
diff --git a/init/fapolicyd.service b/init/fapolicyd.service
|
|
|
090c79 |
index 715de98..a5a6a3f 100644
|
|
|
090c79 |
--- a/init/fapolicyd.service
|
|
|
090c79 |
+++ b/init/fapolicyd.service
|
|
|
090c79 |
@@ -11,6 +11,8 @@ PIDFile=/run/fapolicyd.pid
|
|
|
090c79 |
ExecStartPre=/usr/sbin/fagenrules
|
|
|
090c79 |
ExecStart=/usr/sbin/fapolicyd
|
|
|
090c79 |
Restart=on-abnormal
|
|
|
090c79 |
+# Uncomment the following line if rules need user/group name lookup
|
|
|
090c79 |
+#After=nss-user-lookup.target
|
|
|
090c79 |
|
|
|
090c79 |
[Install]
|
|
|
090c79 |
WantedBy=multi-user.target
|
|
|
090c79 |
--
|
|
|
090c79 |
2.37.1
|
|
|
090c79 |
|