diff --git a/refpolicy/policy/modules/services/cron.te b/refpolicy/policy/modules/services/cron.te index d0ddc63..f93be50 100644 --- a/refpolicy/policy/modules/services/cron.te +++ b/refpolicy/policy/modules/services/cron.te @@ -137,6 +137,12 @@ tunable_policy(`fcron_crond', ` allow crond_t system_cron_spool_t:file create_file_perms; ') +optional_policy(`inn.te',` + inn_manage_log(system_crond_t) + inn_manage_pid(system_crond_t) + inn_read_config(system_crond_t) +') + optional_policy(`nis.te',` nis_use_ypbind(crond_t) ') diff --git a/refpolicy/policy/modules/system/init.te b/refpolicy/policy/modules/system/init.te index 1a7e128..18a32f2 100644 --- a/refpolicy/policy/modules/system/init.te +++ b/refpolicy/policy/modules/system/init.te @@ -396,6 +396,10 @@ optional_policy(`hotplug.te',` modutils_read_mods_deps(initrc_t) ') +optional_policy(`inn.te',` + inn_exec_config(initrc_t) +') + optional_policy(`ipsec.te',` ipsec_read_config(initrc_t) ipsec_manage_pid(initrc_t) diff --git a/refpolicy/policy/modules/system/logging.te b/refpolicy/policy/modules/system/logging.te index 5de1e2c..1625b3d 100644 --- a/refpolicy/policy/modules/system/logging.te +++ b/refpolicy/policy/modules/system/logging.te @@ -264,6 +264,10 @@ optional_policy(`cron.te',` cron_rw_log(syslogd_t) ') +optional_policy(`inn.te',` + inn_manage_log(syslogd_t) +') + optional_policy(`nis.te',` nis_use_ypbind(syslogd_t) ') diff --git a/refpolicy/policy/modules/system/userdomain.if b/refpolicy/policy/modules/system/userdomain.if index 939929e..9996324 100644 --- a/refpolicy/policy/modules/system/userdomain.if +++ b/refpolicy/policy/modules/system/userdomain.if @@ -253,6 +253,12 @@ template(`base_user_template',` inetd_tcp_connect($1_t) ') + optional_policy(`inn.te',` + inn_read_config($1_t) + inn_read_news_lib($1_t) + inn_read_news_spool($1_t) + ') + optional_policy(`nis.te',` nis_use_ypbind($1_t) ')