* [PATCH] minor updates redis module to be able to start the app
@ 2019-01-30 13:21 Alexander Miroshnichenko
2019-01-30 23:56 ` Chris PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Alexander Miroshnichenko @ 2019-01-30 13:21 UTC (permalink / raw)
To: selinux-refpolicy; +Cc: Alexander Miroshnichenko
Signed-off-by: Alexander Miroshnichenko <alex@millerson.name>
---
policy/modules/services/redis.te | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/policy/modules/services/redis.te b/policy/modules/services/redis.te
index afb5ba870b71..0878fb8fca15 100644
--- a/policy/modules/services/redis.te
+++ b/policy/modules/services/redis.te
@@ -29,7 +29,7 @@ files_config_file(redis_conf_t)
# Local policy
#
-allow redis_t self:process { setrlimit signal_perms };
+allow redis_t self:process { setrlimit signal_perms getsched };
allow redis_t self:fifo_file rw_fifo_file_perms;
allow redis_t self:unix_stream_socket create_stream_socket_perms;
allow redis_t self:tcp_socket create_stream_socket_perms;
@@ -41,6 +41,7 @@ manage_files_pattern(redis_t, redis_log_t, redis_log_t)
manage_lnk_files_pattern(redis_t, redis_log_t, redis_log_t)
logging_log_filetrans(redis_t, redis_log_t, dir)
+files_search_var_lib(redis_t)
manage_dirs_pattern(redis_t, redis_var_lib_t, redis_var_lib_t)
manage_files_pattern(redis_t, redis_var_lib_t, redis_var_lib_t)
manage_lnk_files_pattern(redis_t, redis_var_lib_t, redis_var_lib_t)
--
2.19.2
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH] minor updates redis module to be able to start the app
2019-01-30 13:21 [PATCH] minor updates redis module to be able to start the app Alexander Miroshnichenko
@ 2019-01-30 23:56 ` Chris PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Chris PeBenito @ 2019-01-30 23:56 UTC (permalink / raw)
To: Alexander Miroshnichenko, selinux-refpolicy
On 1/30/19 8:21 AM, Alexander Miroshnichenko wrote:
> Signed-off-by: Alexander Miroshnichenko <alex@millerson.name>
> ---
> policy/modules/services/redis.te | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/policy/modules/services/redis.te b/policy/modules/services/redis.te
> index afb5ba870b71..0878fb8fca15 100644
> --- a/policy/modules/services/redis.te
> +++ b/policy/modules/services/redis.te
> @@ -29,7 +29,7 @@ files_config_file(redis_conf_t)
> # Local policy
> #
>
> -allow redis_t self:process { setrlimit signal_perms };
> +allow redis_t self:process { setrlimit signal_perms getsched };
> allow redis_t self:fifo_file rw_fifo_file_perms;
> allow redis_t self:unix_stream_socket create_stream_socket_perms;
> allow redis_t self:tcp_socket create_stream_socket_perms;
> @@ -41,6 +41,7 @@ manage_files_pattern(redis_t, redis_log_t, redis_log_t)
> manage_lnk_files_pattern(redis_t, redis_log_t, redis_log_t)
> logging_log_filetrans(redis_t, redis_log_t, dir)
>
> +files_search_var_lib(redis_t)
> manage_dirs_pattern(redis_t, redis_var_lib_t, redis_var_lib_t)
> manage_files_pattern(redis_t, redis_var_lib_t, redis_var_lib_t)
> manage_lnk_files_pattern(redis_t, redis_var_lib_t, redis_var_lib_t)
Merged.
--
Chris PeBenito
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-01-30 23:56 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-01-30 13:21 [PATCH] minor updates redis module to be able to start the app Alexander Miroshnichenko
2019-01-30 23:56 ` Chris PeBenito
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).