[node-patches] Change in ovirt-node[node-3.0]: ovirt.te: add sanlock nfs avc

[fabiand at redhat.com]

Hello Douglas Schilling Landgraf,

I'd like you to do a code review.  Please visit

    http://gerrit.ovirt.org/34336

to review the following change.

Change subject: ovirt.te: add sanlock nfs avc
......................................................................

ovirt.te: add sanlock nfs avc

This patch adds:
  allow sanlock_t nfs_t:dir search;
  allow sanlock_t nfs_t:file open;

Change-Id: I1f24af8c501626de6c59f5d31f8ca9c93b9671bd
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>
---
M semodule/ovirt.te.in
1 file changed, 5 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/36/34336/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index c919b03..7bd21c8 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -24,6 +24,7 @@
     type logrotate_t;
     type mount_t;
     type net_conf_t;
+    type nfs_t;
     type policykit_t;
     type sanlock_t;
     type setfiles_t;
@@ -99,6 +100,10 @@
 allow svirt_t initrc_t:unix_stream_socket connectto;
 allow svirt_t sanlock_t:unix_stream_socket connectto;
 
+#============= sanlock_t ==============
+allow sanlock_t nfs_t:dir search;
+allow sanlock_t nfs_t:file open;
+
 #============= syslogd_t ==============
 allow syslogd_t var_lib_t:file { write getattr open };
 


-- 
To view, visit http://gerrit.ovirt.org/34336
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I1f24af8c501626de6c59f5d31f8ca9c93b9671bd
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: node-3.0
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>