[node-patches] Change in ovirt-node[node-3.0]: [DRAFT] update selinux module

[fabiand at fedoraproject.org]

Fabian Deutsch has uploaded a new change for review.

Change subject: [DRAFT] update selinux module
......................................................................

[DRAFT] update selinux module

Change-Id: I2f42a94450d7365b9d11afcc332810a5f6c65879
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>
---
M semodule/ovirt.te.in
1 file changed, 15 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/40/21540/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 2763fb3..3083f7f 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -26,6 +26,7 @@
 @COLLECTD_COMMENT at allow collectd_t virtd_exec_t:file getattr;
 @COLLECTD_COMMENT at allow collectd_t virt_etc_t:file read;
 @COLLECTD_COMMENT at allow collectd_t virt_var_run_t:sock_file write;
+ at COLLECTD_COMMENT@allow collectd_t virtd_t:unix_stream_socket connectto;
 
 #============= systemd_localed_t ==============
 @SYSTEMD_COMMENT at allow systemd_localed_t etc_t:file { write rename create setattr };
@@ -40,6 +41,20 @@
 allow policykit_t ovirt_t:dbus send_msg;
 allow local_login_t var_log_t:file { write create };
 
+#============= initrc_t ==============
+allow initrc_t sshd_net_t:process dyntransition;
+allow initrc_t unconfined_t:process dyntransition;
+
+#============= local_login_t ==============
+allow local_login_t var_log_t:file open;
+
+#============= logrotate_t ==============
+allow logrotate_t virt_cache_t:dir read;
+
+#============= svirt_t ==============
+allow svirt_t initrc_t:unix_stream_socket connectto;
+
+
 type ovirt_t;
 type ovirt_exec_t;
 init_daemon_domain(ovirt_t, ovirt_exec_t)


-- 
To view, visit http://gerrit.ovirt.org/21540
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I2f42a94450d7365b9d11afcc332810a5f6c65879
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: node-3.0
Gerrit-Owner: Fabian Deutsch <fabiand at fedoraproject.org>