PERFORCE change 37493 for review

[Chris Vance]

http://perforce.freebsd.org/chv.cgi?CH=37493

Change 37493 by cvance at cvance_release on 2003/09/04 07:52:06

	syslogd needs to send signals to a child process

Affected files ...

.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/domains/program/syslogd.te#2 edit

Differences ...

==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/domains/program/syslogd.te#2 (text+ko) ====

@@ -26,7 +26,7 @@
 file_type_auto_trans(syslogd_t, var_run_t, syslogd_var_run_t)
 
 # Use capabilities.
-allow syslogd_t syslogd_t:capability { net_bind_service dac_override };
+allow syslogd_t syslogd_t:capability { kill net_bind_service dac_override };
 
 # Inherit and use descriptors from init.
 allow syslogd_t init_t:fd use;
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message