diff options
| author |   Chris PeBenito <pebenito@ieee.org> | 2017-02-23 18:15:45 -0500 |
|---|---|---|
| committer |   Jason Zaman <jason@perfinion.com> | 2017-02-25 22:50:53 +0800 |
| commit | 247f0728c48ca087ecfd18cb21719420248ce0a6 (patch) | |
| tree | da456925cd04b35cbd11bd3fb21bd74985dd36a7 | |
| parent | patch for samba (diff) | |
| download | hardened-refpolicy-247f0728c48ca087ecfd18cb21719420248ce0a6.tar.gz hardened-refpolicy-247f0728c48ca087ecfd18cb21719420248ce0a6.tar.bz2 hardened-refpolicy-247f0728c48ca087ecfd18cb21719420248ce0a6.zip | |
samba: A few line moves.
| -rw-r--r-- | policy/modules/contrib/samba.te | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/policy/modules/contrib/samba.te b/policy/modules/contrib/samba.te index 6f314b0c..afff38ff 100644 --- a/policy/modules/contrib/samba.te +++ b/policy/modules/contrib/samba.te @@ -381,11 +381,7 @@ auth_domtrans_chk_passwd(smbd_t) auth_domtrans_upd_passwd(smbd_t) auth_manage_cache(smbd_t) auth_write_login_records(smbd_t) - auth_can_read_shadow_passwords(smbd_t) -tunable_policy(`samba_read_shadow',` - auth_tunable_read_shadow(smbd_t) -') init_rw_utmp(smbd_t) @@ -446,6 +442,10 @@ tunable_policy(`samba_portmapper',` corenet_tcp_sendrecv_all_ports(smbd_t) ') +tunable_policy(`samba_read_shadow',` + auth_tunable_read_shadow(smbd_t) +') + tunable_policy(`samba_share_nfs',` fs_manage_nfs_dirs(smbd_t) fs_manage_nfs_files(smbd_t) @@ -560,6 +560,8 @@ kernel_read_network_state(nmbd_t) kernel_read_software_raid_state(nmbd_t) kernel_read_system_state(nmbd_t) +corecmd_search_bin(nmbd_t) + corenet_all_recvfrom_unlabeled(nmbd_t) corenet_all_recvfrom_netlabel(nmbd_t) corenet_tcp_sendrecv_generic_if(nmbd_t) @@ -576,7 +578,6 @@ corenet_sendrecv_smbd_client_packets(nmbd_t) corenet_tcp_connect_smbd_port(nmbd_t) corenet_tcp_sendrecv_smbd_port(nmbd_t) -corecmd_search_bin(nmbd_t) dev_read_urand(nmbd_t) dev_read_sysfs(nmbd_t) dev_getattr_mtrr_dev(nmbd_t) |