[node-patches] Change in ovirt-node[ovirt-3.6]: semodule: update ebtables module

[fabiand at redhat.com]

Hello Douglas Schilling Landgraf,

I'd like you to do a code review.  Please visit

    https://gerrit.ovirt.org/51774

to review the following change.

Change subject: semodule: update ebtables module
......................................................................

semodule: update ebtables module

Thanks for  Charlie Inglese <cinglese at exetergov.com> for reporting.

Change-Id: Ie7f9a58b111ec80d662020ef3849aa1b7e614d4d
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1294517
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
---
M semodule/ovirt.te.in
1 file changed, 3 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/74/51774/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 48c2851..beaa702 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -483,10 +483,13 @@
     require {
         type iptables_t;
         type insmod_t;
+        type var_lib_t;
     }
     allow iptables_t tmpfs_t:dir search;
     allow iptables_t insmod_t:process { siginh rlimitinh noatsecure };
     allow iptables_t user_tmpfs_t:file { read open getattr };
+    allow iptables_t var_lib_t:dir { write remove_name create add_name };
+    allow iptables_t var_lib_t:file { write create unlink open };
 ')
 
 #============= init_t ==============


-- 
To view, visit https://gerrit.ovirt.org/51774
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie7f9a58b111ec80d662020ef3849aa1b7e614d4d
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.6
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>
Gerrit-Reviewer: Fabian Deutsch <fabiand at redhat.com>