[node-patches] Change in ovirt-node[master]: selinux: Add wdmd_t related rules

[fabiand at redhat.com]

Fabian Deutsch has uploaded a new change for review.

Change subject: selinux: Add wdmd_t related rules
......................................................................

selinux: Add wdmd_t related rules

Change-Id: I6c947740dc12a2a7f0d765ccaa8bd4841efc369c
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>
---
M semodule/ovirt.te.in
1 file changed, 11 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/30/33930/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 52fc133..c6f86e1 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -553,6 +553,17 @@
 ')
 
 
+#============= wdmd_t ==============
+optional_policy(`
+    require {
+        type wdmd_t;
+        type device_t;
+    }
+    allow wdmd_t device_t:file unlink;
+    allow wdmd_t device_t:sock_file write;
+    allow wdmd_t ovirt_t:unix_dgram_socket sendto;
+')
+
 
 
 #


-- 
To view, visit http://gerrit.ovirt.org/33930
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I6c947740dc12a2a7f0d765ccaa8bd4841efc369c
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>