From cd17345324c4e166c1a26f9baeab2d9e67e330d6 Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Feb 24 2010 15:11:51 +0000 Subject: Various abrt fixes. Fix networking compatibility. Allow domains to search bin to enable run abrt executables. Signed-off-by: Dominick Grift Signed-off-by: Chris PeBenito --- diff --git a/policy/modules/services/abrt.if b/policy/modules/services/abrt.if index e9ed246..b2b1657 100644 --- a/policy/modules/services/abrt.if +++ b/policy/modules/services/abrt.if @@ -34,6 +34,7 @@ interface(`abrt_exec',` type abrt_exec_t; ') + corecmd_search_bin($1) can_exec($1, abrt_exec_t) ') diff --git a/policy/modules/services/abrt.te b/policy/modules/services/abrt.te index 559ce2d..0099ed3 100644 --- a/policy/modules/services/abrt.te +++ b/policy/modules/services/abrt.te @@ -76,7 +76,14 @@ kernel_rw_kernel_sysctl(abrt_t) corecmd_exec_bin(abrt_t) corecmd_exec_shell(abrt_t) +corenet_all_recvfrom_netlabel(abrt_t) +corenet_all_recvfrom_unlabeled(abrt_t) +corenet_sendrecv_http_client_packets(abrt_t) +corenet_tcp_bind_generic_node(abrt_t) corenet_tcp_connect_http_port(abrt_t) +corenet_tcp_sendrecv_generic_if(abrt_t) +corenet_tcp_sendrecv_generic_node(abrt_t) +corenet_tcp_sendrecv_generic_port(abrt_t) dev_read_urand(abrt_t)