[node-patches] Change in ovirt-node[ovirt-3.6]: ovirt.te.in: add rule for lldpad

[Code Review]

>From Douglas Schilling Landgraf <dougsland at redhat.com>:

Douglas Schilling Landgraf has uploaded a new change for review.

Change subject: ovirt.te.in: add rule for lldpad
......................................................................

ovirt.te.in: add rule for lldpad

Avoid AVC during boot for lldpad:
type=AVC msg=audit(1482459394.399:25): avc:  denied  { read write }
for  pid=1297 comm="lldpad" name="lldpad.state" dev="tmpfs"
ino=18471 scontext=system_u:system_r:lldpad_t:s0
tcontext=system_u:object_r:tmpfs_t:s0 tclass=file

Change-Id: I1f610cac7c18a14a4520948200f6d9a5113975a3
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1406673
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
(cherry picked from commit 273dbe0f0db5f29ce154833e1a839b957000bfbb)
---
M semodule/ovirt.te.in
1 file changed, 8 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/43/69943/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index e9350c3..5ee5031 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -590,6 +590,14 @@
 ')
 
 
+#============= lldpad_t ==============
+optional_policy(`
+    require {
+        type lldpad_t;
+    }
+    allow lldpad_t tmpfs_t:file { read write open };
+')
+
 #============= mandb_t ==============
 optional_policy(`
     require {


-- 
To view, visit https://gerrit.ovirt.org/69943
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I1f610cac7c18a14a4520948200f6d9a5113975a3
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.6
Gerrit-Owner: Douglas Schilling Landgraf <dougsland at redhat.com>