From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-9.1 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI, SIGNED_OFF_BY,SPF_PASS,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3EC03C282D7 for ; Wed, 30 Jan 2019 13:22:41 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id CA824218AC for ; Wed, 30 Jan 2019 13:22:40 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=millerson.name header.i=@millerson.name header.b="DNYqaL6e" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1731020AbfA3NWk (ORCPT ); Wed, 30 Jan 2019 08:22:40 -0500 Received: from host89-222-249-147.netorn.net ([89.222.249.147]:56330 "EHLO mail.millerson.name" rhost-flags-OK-FAIL-OK-OK) by vger.kernel.org with ESMTP id S1730881AbfA3NWk (ORCPT ); Wed, 30 Jan 2019 08:22:40 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=millerson.name; s=mail; h=MIME-Version:Message-Id:Date:Subject:To:From: user-agent:in-reply-to; bh=F7e0AM6ZlDMPAW1+h6NnY9XHPHJM9mstpJskdZAi2Yc=; b=DN YqaL6ejQJ1nYUgmDUcXPVS3j4DoloX62WowBn3oc7OCEj4VJFZqw4pM88X/fujRKTRPC20vpwZdh1 Mf4WCqOyh38VUPSWupceCN+CAHd6q4cWrexslJj4Y5Eeu+jYYXM0gYBKuDzOvk8n5LKenkR4fc54W j1sKlQWOIKhcJQs=; Received: from localhost ([127.0.0.1] helo=mail.millerson.name) by mail.millerson.name with esmtpsa id 1gopp8-0004x6-4c (envelope-from ); Wed, 30 Jan 2019 16:22:38 +0300 Received: from alex-desktop.home ([10.24.17.100]) by mail.millerson.name with ESMTPSA id AtiVBR6lUVxeSgAAXPwaFA (envelope-from ); Wed, 30 Jan 2019 16:22:38 +0300 From: Alexander Miroshnichenko To: selinux-refpolicy@vger.kernel.org Cc: Alexander Miroshnichenko Subject: [PATCH] minor updates redis module to be able to start the app Date: Wed, 30 Jan 2019 16:21:58 +0300 Message-Id: <20190130132158.11799-1-alex@millerson.name> X-Mailer: git-send-email 2.19.2 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit X-GIT-Signature: 7538b8a87b9c50fffe42051e062825a8 Sender: selinux-refpolicy-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: selinux-refpolicy@vger.kernel.org Signed-off-by: Alexander Miroshnichenko --- policy/modules/services/redis.te | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/policy/modules/services/redis.te b/policy/modules/services/redis.te index afb5ba870b71..0878fb8fca15 100644 --- a/policy/modules/services/redis.te +++ b/policy/modules/services/redis.te @@ -29,7 +29,7 @@ files_config_file(redis_conf_t) # Local policy # -allow redis_t self:process { setrlimit signal_perms }; +allow redis_t self:process { setrlimit signal_perms getsched }; allow redis_t self:fifo_file rw_fifo_file_perms; allow redis_t self:unix_stream_socket create_stream_socket_perms; allow redis_t self:tcp_socket create_stream_socket_perms; @@ -41,6 +41,7 @@ manage_files_pattern(redis_t, redis_log_t, redis_log_t) manage_lnk_files_pattern(redis_t, redis_log_t, redis_log_t) logging_log_filetrans(redis_t, redis_log_t, dir) +files_search_var_lib(redis_t) manage_dirs_pattern(redis_t, redis_var_lib_t, redis_var_lib_t) manage_files_pattern(redis_t, redis_var_lib_t, redis_var_lib_t) manage_lnk_files_pattern(redis_t, redis_var_lib_t, redis_var_lib_t) -- 2.19.2