Fedora and udev

[Luke Kenneth Casson Leighton]

On Tue, Aug 24, 2004 at 05:01:26PM +0100, Luke Kenneth Casson Leighton wrote:

> diff -Naur 
> --- default.1.14/domains/program/udev.te	2004-08-02 08:28:37.000000000 +0100
> +++ current/domains/program/udev.te	2004-08-06 19:20:29.000000000 +0100
> @@ -79,3 +83,15 @@
>  domain_auto_trans(udev_t, ifconfig_exec_t, ifconfig_t)
>  
>  dontaudit udev_t file_t:dir search;
> +
> +# hacked stuff...
> +
> +can_ps(udev_t, domain)
> +
> +# for /etc/dev.d/net/hotplug.dev
> +
> +allow udev_t etc_runtime_t:file { append lock write };
> +can_exec(udev_t hotplug_etc_t)
            ^^^^^^

	yes my policy _does_ really have this (spotted it just now)
	without the comma.

	no, the policy compiler _doesn't_ spot it.

	l.