diff options
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-git/poky-policy-fix-dmesg-to-use-dev-kmsg.patch')
-rw-r--r-- | recipes-security/refpolicy/refpolicy-git/poky-policy-fix-dmesg-to-use-dev-kmsg.patch | 16 |
1 files changed, 1 insertions, 15 deletions
diff --git a/recipes-security/refpolicy/refpolicy-git/poky-policy-fix-dmesg-to-use-dev-kmsg.patch b/recipes-security/refpolicy/refpolicy-git/poky-policy-fix-dmesg-to-use-dev-kmsg.patch index 131a9bb..11a6963 100644 --- a/recipes-security/refpolicy/refpolicy-git/poky-policy-fix-dmesg-to-use-dev-kmsg.patch +++ b/recipes-security/refpolicy/refpolicy-git/poky-policy-fix-dmesg-to-use-dev-kmsg.patch | |||
@@ -4,6 +4,7 @@ Date: Fri, 23 Aug 2013 16:36:09 +0800 | |||
4 | Subject: [PATCH] fix dmesg to use /dev/kmsg as default input | 4 | Subject: [PATCH] fix dmesg to use /dev/kmsg as default input |
5 | 5 | ||
6 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> | 6 | Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> |
7 | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> | ||
7 | --- | 8 | --- |
8 | policy/modules/admin/dmesg.if | 1 + | 9 | policy/modules/admin/dmesg.if | 1 + |
9 | policy/modules/admin/dmesg.te | 2 ++ | 10 | policy/modules/admin/dmesg.te | 2 ++ |
@@ -19,18 +20,3 @@ Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> | |||
19 | can_exec($1, dmesg_exec_t) | 20 | can_exec($1, dmesg_exec_t) |
20 | + dev_read_kmsg($1) | 21 | + dev_read_kmsg($1) |
21 | ') | 22 | ') |
22 | --- a/policy/modules/admin/dmesg.te | ||
23 | +++ b/policy/modules/admin/dmesg.te | ||
24 | @@ -28,10 +28,12 @@ kernel_read_proc_symlinks(dmesg_t) | ||
25 | # for when /usr is not mounted: | ||
26 | kernel_dontaudit_search_unlabeled(dmesg_t) | ||
27 | |||
28 | dev_read_sysfs(dmesg_t) | ||
29 | |||
30 | +dev_read_kmsg(dmesg_t) | ||
31 | + | ||
32 | fs_search_auto_mountpoints(dmesg_t) | ||
33 | |||
34 | term_dontaudit_use_console(dmesg_t) | ||
35 | |||
36 | domain_use_interactive_fds(dmesg_t) | ||