This patch replaces uses of allow ...:notdevfile_class_set r_file_perms; with r_dir_file(). This should be no problem normally; user_t used to have access to sock_file and fifo_file under /var and /var/spool - I have removed this access, if there are any files where access is really needed they should probably get extra types.

Please apply.
Thomas

-- 
http://www.cip.ifi.lmu.de/~bleher/selinux/ - my SELinux pages
GPG-Fingerprint: BC4F BB16 30D6 F253 E3EA  D09E C562 2BAE B2F4 ABE7





--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



text/plain attachment: cleanup_notdevfile.patch



application/pgp-signature attachment: stored