PERFORCE change 23306 for review

[Brian Feldman]

http://perforce.freebsd.org/chv.cgi?CH=23306

Change 23306 by green at green_laptop_2 on 2003/01/06 13:03:34

	Make execution of all the mount_.* programs work properly by
	applying the same sebsd/system_u:object_r:mount_exec_t to all
	of them and allowing mount_t's to execute eachother.

Affected files ...

.. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/mount.te#2 edit
.. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/file_contexts/program/mount.fc#3 edit

Differences ...

==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/mount.te#2 (text+ko) ====

@@ -57,4 +57,5 @@
 `can_udp_send(mount_t, portmap_t)
 can_udp_send(portmap_t, mount_t)')
 
-
+# Access sub-mount(8) commands
+allow mount_t mount_exec_t:file { execute_no_trans };

==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/file_contexts/program/mount.fc#3 (text+ko) ====

@@ -1,3 +1,3 @@
 # mount
-/sbin/mount* 	                system_u:object_r:mount_exec_t
+/sbin/mount(_.*)?		system_u:object_r:mount_exec_t
 /sbin/umount                    system_u:object_r:mount_exec_t
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message