[node-patches] Change in ovirt-node[ovirt-3.5]: semodule: avoid avc in tmpfs_t file (unlink)

[fabiand at redhat.com]

Hello Douglas Schilling Landgraf,

I'd like you to do a code review.  Please visit

    https://gerrit.ovirt.org/47159

to review the following change.

Change subject: semodule: avoid avc in tmpfs_t file (unlink)
......................................................................

semodule: avoid avc in tmpfs_t file (unlink)

The unlink operation in systemd_hostnamed is raising
AVC, this patch fix it.

Change-Id: Ie4f5af9069d8debe1dac05c531b5e7f2273221bc
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 1 insertion(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/59/47159/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index fd4489e..92fbf15 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -136,6 +136,7 @@
 
 #============= systemd_hostnamectl ==============
 @SEMODULE_WITH_SYSTEMD at allow systemd_hostnamed_t tmpfs_t:dir { write remove_name search add_name };
+ at SEMODULE_WITH_SYSTEMD@allow systemd_hostnamed_t tmpfs_t:file { unlink };
 @SEMODULE_WITH_SYSTEMD at allow systemd_hostnamed_t ovirt_t:dbus send_msg;
 
 #============= hald_t ==============


-- 
To view, visit https://gerrit.ovirt.org/47159
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie4f5af9069d8debe1dac05c531b5e7f2273221bc
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>