[node-patches] Change in ovirt-node[master]: ovirt.te: snmpd_t add device_t and ovirt_t

dougsland at redhat.com dougsland at redhat.com
Tue Sep 2 17:38:21 UTC 2014


Douglas Schilling Landgraf has uploaded a new change for review.

Change subject: ovirt.te: snmpd_t add device_t and ovirt_t
......................................................................

ovirt.te: snmpd_t add device_t and ovirt_t

This patch adds:

- snmpd_t device_t:sock_file write
- snmpd_t ovirt_t:unix_dgram_socket sendto

Change-Id: Ieb9cc8140397af95fdbcc8e5a4b55132ed9db80b
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 6 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/31/32331/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 1266b5e..d907b7d 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -132,6 +132,12 @@
     allow sshd_net_t initrc_t:process sigchld;
 ')
 
+#============= snmpd_t ==============
+require {
+    type snmpd_t;
+}
+allow snmpd_t device_t:sock_file write;
+allow snmpd_t ovirt_t:unix_dgram_socket sendto;
 
 #============= sshd_t ==============
 allow sshd_t var_log_t:file { read open write };


-- 
To view, visit http://gerrit.ovirt.org/32331
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ieb9cc8140397af95fdbcc8e5a4b55132ed9db80b
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Douglas Schilling Landgraf <dougsland at redhat.com>



More information about the node-patches mailing list