PERFORCE change 23065 for review

[Chris Vance]

http://perforce.freebsd.org/chv.cgi?CH=23065

Change 23065 by cvance at cvance_laptop on 2003/01/02 13:35:06

	Fix policy so syslogd can read from /dev/klog

Affected files ...

.. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/syslogd.te#2 edit
.. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/genfs_contexts#6 edit

Differences ...

==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/syslogd.te#2 (text+ko) ====

@@ -17,6 +17,7 @@
 type syslogd_exec_t, file_type, sysadmfile, exec_type;
 domain_auto_trans(initrc_t, syslogd_exec_t, syslogd_t)
 type_transition init_t syslogd_exec_t:process syslogd_t;
+type klog_device_t, file_type, sysadmfile;
 type devlog_t, file_type, sysadmfile;
 
 type syslogd_tmp_t, file_type, sysadmfile, tmpfile;
@@ -45,3 +46,6 @@
 
 # Write to the cron log.
 allow syslogd_t cron_log_t:file rw_file_perms;
+
+# Read/poll /dev/klog
+allow syslogd_t klog_device_t:chr_file {read poll};
==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/genfs_contexts#6 (text+ko) ====

@@ -76,4 +76,5 @@
 genfscon devfs /sound -c		system_u:object_r:sound_device_t
 genfscon devfs /usb			system_u:object_r:usbdevfs_device_t
 genfscon devfs /bpf -c			system_u:object_r:bpf_device_t
+genfscon devfs /klog			system_u:object_r:klog_device_t
 # FLASK
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message