diff --git a/Changelog b/Changelog index 1cf7dc4..e0fcc58 100644 --- a/Changelog +++ b/Changelog @@ -7,6 +7,7 @@ - Added modules: accountsd (Dan Walsh) cgroup (Dominick Grift) + kdumpgui (Dan Walsh) livecd (Dan Walsh) mojomojo (Lain Arnell) sambagui (Dan Walsh) diff --git a/policy/modules/apps/kdumpgui.fc b/policy/modules/apps/kdumpgui.fc index f97c6e9..250679c 100644 --- a/policy/modules/apps/kdumpgui.fc +++ b/policy/modules/apps/kdumpgui.fc @@ -1 +1 @@ -/usr/share/system-config-kdump/system-config-kdump-backend.py -- gen_context(system_u:object_r:kdumpgui_exec_t,s0) +/usr/share/system-config-kdump/system-config-kdump-backend\.py -- gen_context(system_u:object_r:kdumpgui_exec_t,s0) diff --git a/policy/modules/apps/kdumpgui.te b/policy/modules/apps/kdumpgui.te index 777acf4..f63c4c2 100644 --- a/policy/modules/apps/kdumpgui.te +++ b/policy/modules/apps/kdumpgui.te @@ -7,7 +7,6 @@ policy_module(kdumpgui, 1.0.0) type kdumpgui_t; type kdumpgui_exec_t; - dbus_system_domain(kdumpgui_t, kdumpgui_exec_t) ###################################### @@ -15,9 +14,7 @@ dbus_system_domain(kdumpgui_t, kdumpgui_exec_t) # system-config-kdump local policy # -allow kdumpgui_t self:capability { net_admin sys_admin sys_rawio }; allow kdumpgui_t self:fifo_file rw_fifo_file_perms; - allow kdumpgui_t self:netlink_kobject_uevent_socket create_socket_perms; kernel_read_system_state(kdumpgui_t) @@ -29,14 +26,13 @@ corecmd_exec_shell(kdumpgui_t) dev_dontaudit_getattr_all_chr_files(kdumpgui_t) dev_read_sysfs(kdumpgui_t) -# for blkid.tab -files_manage_etc_runtime_files(kdumpgui_t) -files_etc_filetrans_etc_runtime(kdumpgui_t, file) - files_manage_boot_files(kdumpgui_t) files_manage_boot_symlinks(kdumpgui_t) # Needed for running chkconfig files_manage_etc_symlinks(kdumpgui_t) +# for blkid.tab +files_manage_etc_runtime_files(kdumpgui_t) +files_etc_filetrans_etc_runtime(kdumpgui_t, file) storage_raw_read_fixed_disk(kdumpgui_t) storage_raw_write_fixed_disk(kdumpgui_t)