diff --git a/policy/modules/services/lpd.if b/policy/modules/services/lpd.if index d801ec0..20c8eed 100644 --- a/policy/modules/services/lpd.if +++ b/policy/modules/services/lpd.if @@ -27,7 +27,7 @@ interface(`lpd_role',` dontaudit lpr_t $2:unix_stream_socket { read write }; ps_process_pattern($2, lpr_t) - allow $2 lpr_t:process signull; + allow $2 lpr_t:process { ptrace signal_perms }; optional_policy(` cups_read_config($2) diff --git a/policy/modules/services/mock.if b/policy/modules/services/mock.if index 5a1698c..4ed75f1 100644 --- a/policy/modules/services/mock.if +++ b/policy/modules/services/mock.if @@ -185,7 +185,7 @@ interface(`mock_role',` mock_domtrans($2) ps_process_pattern($2, mock_t) - allow $2 mock_t:process signal; + allow $2 mock_t:process { ptrace signal_perms }; ') #######################################