diff --git a/policy/modules/services/nscd.if b/policy/modules/services/nscd.if index 3b5d2a1..beed4c5 100644 --- a/policy/modules/services/nscd.if +++ b/policy/modules/services/nscd.if @@ -236,6 +236,24 @@ interface(`nscd_run',` ######################################## ## +## Execute the nscd server init script. +## +## +## +## Domain allowed access. +## +## +# +interface(`nscd_initrc_domtrans',` + gen_require(` + type nscd_initrc_exec_t; + ') + + init_labeled_script_domtrans($1, nscd_initrc_exec_t) +') + +######################################## +## ## All of the rules required to administrate ## an nscd environment ## diff --git a/policy/modules/services/nscd.te b/policy/modules/services/nscd.te index 9b50922..afbd2be 100644 --- a/policy/modules/services/nscd.te +++ b/policy/modules/services/nscd.te @@ -1,5 +1,5 @@ -policy_module(nscd, 1.9.1) +policy_module(nscd, 1.9.2) gen_require(` class nscd all_nscd_perms; @@ -65,6 +65,7 @@ dev_read_urand(nscd_t) fs_getattr_all_fs(nscd_t) fs_search_auto_mountpoints(nscd_t) +fs_list_inotifyfs(nscd_t) # for when /etc/passwd has just been updated and has the wrong type auth_getattr_shadow(nscd_t)