forked from pool/selinux-policy
77 lines
3.9 KiB
Diff
77 lines
3.9 KiB
Diff
|
Index: serefpolicy-contrib-20140730/ntp.fc
|
||
|
|
===================================================================
|
||
|
|
--- serefpolicy-contrib-20140730.orig/ntp.fc
|
||
|
|
+++ serefpolicy-contrib-20140730/ntp.fc
|
||
|
|
@@ -1,25 +1,36 @@
|
||
|
|
/etc/cron\.(daily|weekly)/ntp-simple -- gen_context(system_u:object_r:ntpd_exec_t,s0)
|
||
|
|
/etc/cron\.(daily|weekly)/ntp-server -- gen_context(system_u:object_r:ntpd_exec_t,s0)
|
||
|
|
|
||
|
|
-/etc/ntpd.*\.conf.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
|
||
|
|
-/etc/ntp/crypto(/.*)? gen_context(system_u:object_r:ntpd_key_t,s0)
|
||
|
|
-/etc/ntp/data(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
-/etc/ntp/keys -- gen_context(system_u:object_r:ntpd_key_t,s0)
|
||
|
|
-/etc/ntp/step-tickers.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
|
||
|
|
-
|
||
|
|
-/etc/rc\.d/init\.d/ntpd -- gen_context(system_u:object_r:ntpd_initrc_exec_t,s0)
|
||
|
|
-
|
||
|
|
-/usr/sbin/ntpd -- gen_context(system_u:object_r:ntpd_exec_t,s0)
|
||
|
|
-/usr/sbin/ntpdate -- gen_context(system_u:object_r:ntpdate_exec_t,s0)
|
||
|
|
-/usr/sbin/sntp -- gen_context(system_u:object_r:ntpdate_exec_t,s0)
|
||
|
|
-
|
||
|
|
-/usr/lib/systemd/system/ntpd.* -- gen_context(system_u:object_r:ntpd_unit_file_t,s0)
|
||
|
|
-
|
||
|
|
-/var/lib/ntp(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
-/var/lib/sntp-kod(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
-
|
||
|
|
-/var/log/ntp.* -- gen_context(system_u:object_r:ntpd_log_t,s0)
|
||
|
|
-/var/log/ntpstats(/.*)? gen_context(system_u:object_r:ntpd_log_t,s0)
|
||
|
|
-/var/log/xntpd.* -- gen_context(system_u:object_r:ntpd_log_t,s0)
|
||
|
|
-
|
||
|
|
-/var/run/ntpd\.pid -- gen_context(system_u:object_r:ntpd_var_run_t,s0)
|
||
|
|
+/etc/ntpd.*\.conf.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
|
||
|
|
+/etc/ntp/crypto(/.*)? gen_context(system_u:object_r:ntpd_key_t,s0)
|
||
|
|
+/etc/ntp/data(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
+/etc/ntp/keys -- gen_context(system_u:object_r:ntpd_key_t,s0)
|
||
|
|
+/etc/ntp/step-tickers.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
|
||
|
|
+
|
||
|
|
+/etc/rc\.d/init\.d/ntpd -- gen_context(system_u:object_r:ntpd_initrc_exec_t,s0)
|
||
|
|
+
|
||
|
|
+/usr/sbin/ntpd -- gen_context(system_u:object_r:ntpd_exec_t,s0)
|
||
|
|
+/usr/sbin/start-ntpd -- gen_context(system_u:object_r:ntpd_exec_t,s0)
|
||
|
|
+/usr/sbin/ntpdate -- gen_context(system_u:object_r:ntpdate_exec_t,s0)
|
||
|
|
+/usr/sbin/sntp -- gen_context(system_u:object_r:ntpdate_exec_t,s0)
|
||
|
|
+
|
||
|
|
+/usr/lib/systemd/system/ntpd.* -- gen_context(system_u:object_r:ntpd_unit_file_t,s0)
|
||
|
|
+
|
||
|
|
+/var/lib/ntp(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
+/var/lib/sntp-kod(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
+
|
||
|
|
+/var/log/ntp.* -- gen_context(system_u:object_r:ntpd_log_t,s0)
|
||
|
|
+/var/log/ntpstats(/.*)? gen_context(system_u:object_r:ntpd_log_t,s0)
|
||
|
|
+/var/log/xntpd.* -- gen_context(system_u:object_r:ntpd_log_t,s0)
|
||
|
|
+
|
||
|
|
+/var/run/ntpd\.pid -- gen_context(system_u:object_r:ntpd_var_run_t,s0)
|
||
|
|
+
|
||
|
|
+# SUSE chroot
|
||
|
|
+/var/lib/ntp/etc/ntpd?.*\.conf.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
|
||
|
|
+/var/lib/ntp/etc/ntp/crypto(/.*)? gen_context(system_u:object_r:ntpd_key_t,s0)
|
||
|
|
+/var/lib/ntp/etc/ntp/data(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
+/var/lib/ntp/etc/ntp/keys -- gen_context(system_u:object_r:ntpd_key_t,s0)
|
||
|
|
+/var/lib/ntp/etc/ntp/step-tickers.* -- gen_context(system_u:object_r:ntp_conf_t,s0)
|
||
|
|
+/var/lib/ntp/var/lib/ntp(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
+/var/lib/ntp/var/lib/sntp-kod(/.*)? gen_context(system_u:object_r:ntp_drift_t,s0)
|
||
|
|
+/var/lib/ntp/var/run/ntp(/.*)? gen_context(system_u:object_r:ntpd_var_run_t,s0)
|
||
|
|
Index: serefpolicy-contrib-20140730/ntp.te
|
||
|
|
===================================================================
|
||
|
|
--- serefpolicy-contrib-20140730.orig/ntp.te
|
||
|
|
+++ serefpolicy-contrib-20140730/ntp.te
|
||
|
|
@@ -76,7 +76,7 @@ manage_files_pattern(ntpd_t, ntpd_tmpfs_
|
||
|
|
fs_tmpfs_filetrans(ntpd_t, ntpd_tmpfs_t, { dir file })
|
||
|
|
|
||
|
|
manage_files_pattern(ntpd_t, ntpd_var_run_t, ntpd_var_run_t)
|
||
|
|
-files_pid_filetrans(ntpd_t, ntpd_var_run_t, file)
|
||
|
|
+files_pid_filetrans(ntpd_t, ntpd_var_run_t, { file lnk_file } )
|
||
|
|
|
||
|
|
can_exec(ntpd_t, ntpd_exec_t)
|
||
|
|
|