admin_prelink changes

Prelink needs to be able to write execs in /usr dirs Needs sys_resource capability

• nsaserefpolicy/policy/modules/admin/prelink.te 2007-05-29 14:10:59.000000000 -0400
  +++ serefpolicy-3.0.1/policy/modules/admin/prelink.te 2007-05-30 09:25:53.000000000 -0400
  @@ -26,7 +26,7 @@ # Local policy #

-allow prelink_t self:capability { chown dac_override fowner fsetid };


+allow prelink_t self:capability { chown dac_override fowner fsetid sys_resource };

 allow prelink_t self:process { execheap execmem execstack signal };
 allow prelink_t self:fifo_file rw_fifo_file_perms;
 

@@ -65,6 +65,7 @@

 files_read_etc_files(prelink_t)
 files_read_etc_runtime_files(prelink_t)
 files_dontaudit_read_all_symlinks(prelink_t)

 fs_getattr_xattr_fs(prelink_t)  

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.