[node-patches] Change in ovirt-node[ovirt-3.5]: semodule: avoid NetworkManager AVCs

[fabiand at redhat.com]

Hello Douglas Schilling Landgraf,

I'd like you to do a code review.  Please visit

    https://gerrit.ovirt.org/47160

to review the following change.

Change subject: semodule: avoid NetworkManager AVCs
......................................................................

semodule: avoid NetworkManager AVCs

This patch improves the rules for selinux to avoid
AVCs in NetworkManager.

Change-Id: I1c0ab7840e03426298397b83f4e38a3a336a5c32
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 2 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/60/47160/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 92fbf15..b72046e 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -538,7 +538,8 @@
     require {
         type NetworkManager_t;
     }
-    allow NetworkManager_t tmpfs_t:dir { read };
+    allow NetworkManager_t tmpfs_t:dir { read write add_name remove_name };
+    allow NetworkManager_t tmpfs_t:file { read write getattr open create rename unlink };
 ')
 
 


-- 
To view, visit https://gerrit.ovirt.org/47160
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I1c0ab7840e03426298397b83f4e38a3a336a5c32
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>