diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-don-t-audit-tty_device_t.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-don-t-audit-tty_device_t.patch | 35 |
1 files changed, 0 insertions, 35 deletions
diff --git a/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-don-t-audit-tty_device_t.patch b/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-don-t-audit-tty_device_t.patch deleted file mode 100644 index 346872a..0000000 --- a/recipes-security/refpolicy/refpolicy-2.20170204/poky-policy-don-t-audit-tty_device_t.patch +++ /dev/null | |||
@@ -1,35 +0,0 @@ | |||
1 | From 29a0d287880f8f83cf4337a3db7c8b94c0c36e1d Mon Sep 17 00:00:00 2001 | ||
2 | From: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
3 | Date: Thu, 22 Aug 2013 13:37:23 +0800 | ||
4 | Subject: [PATCH 6/6] don't audit tty_device_t in term_dontaudit_use_console. | ||
5 | |||
6 | We should also not audit terminal to rw tty_device_t and fds in | ||
7 | term_dontaudit_use_console. | ||
8 | |||
9 | Upstream-Status: Inappropriate [only for Poky] | ||
10 | |||
11 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> | ||
12 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
13 | --- | ||
14 | policy/modules/kernel/terminal.if | 3 +++ | ||
15 | 1 file changed, 3 insertions(+) | ||
16 | |||
17 | --- a/policy/modules/kernel/terminal.if | ||
18 | +++ b/policy/modules/kernel/terminal.if | ||
19 | @@ -297,13 +297,16 @@ interface(`term_use_console',` | ||
20 | ## </param> | ||
21 | # | ||
22 | interface(`term_dontaudit_use_console',` | ||
23 | gen_require(` | ||
24 | type console_device_t; | ||
25 | + type tty_device_t; | ||
26 | ') | ||
27 | |||
28 | + init_dontaudit_use_fds($1) | ||
29 | dontaudit $1 console_device_t:chr_file rw_chr_file_perms; | ||
30 | + dontaudit $1 tty_device_t:chr_file rw_chr_file_perms; | ||
31 | ') | ||
32 | |||
33 | ######################################## | ||
34 | ## <summary> | ||
35 | ## Set the attributes of the console | ||