diff options
| author |   Guido Trentalancia <guido@trentalancia.net> | 2017-04-29 20:17:13 +0200 |
|---|---|---|
| committer |   Jason Zaman <jason@perfinion.com> | 2017-05-07 23:54:42 +0800 |
| commit | 7bb79960bdc89e57c7f681c63692c5341c1911e3 (patch) | |
| tree | db85d7fd213add70808649603508a57eea63c22c | |
| parent | Module version bump for /usr/bin fc fixes from Nicolas Iooss. (diff) | |
| download | hardened-refpolicy-7bb79960bdc89e57c7f681c63692c5341c1911e3.tar.gz hardened-refpolicy-7bb79960bdc89e57c7f681c63692c5341c1911e3.tar.bz2 hardened-refpolicy-7bb79960bdc89e57c7f681c63692c5341c1911e3.zip | |
evolution: minor fixes and updates
Minor fixes and updates for the evolution module.
Signed-off-by: Guido Trentalancia <guido@trentalancia.net>
| -rw-r--r-- | policy/modules/contrib/evolution.te | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/policy/modules/contrib/evolution.te b/policy/modules/contrib/evolution.te index bf456df4..c30623de 100644 --- a/policy/modules/contrib/evolution.te +++ b/policy/modules/contrib/evolution.te @@ -111,7 +111,7 @@ userdom_user_tmpfs_file(evolution_webcal_tmpfs_t) # allow evolution_t self:capability { setgid setuid sys_nice }; -allow evolution_t self:process { execmem getsched setsched signal }; +allow evolution_t self:process { execmem getsched setsched signal signull }; allow evolution_t self:fifo_file rw_file_perms; allow evolution_t evolution_home_t:dir manage_dir_perms; @@ -320,6 +320,7 @@ dev_read_urand(evolution_alarm_t) files_read_usr_files(evolution_alarm_t) +fs_dontaudit_getattr_xattr_fs(evolution_alarm_t) fs_search_auto_mountpoints(evolution_alarm_t) auth_use_nsswitch(evolution_alarm_t) |