Menu
▾
▴
[Audit-test-developer] [PATCH 44/46] kvm: add prelink_mask_t to qemu/svirt allowed transitions
|
From: Jiri J. <jja...@re...> - 2014-09-23 09:46:27
|
From: Miroslav Vadkerti <mva...@re...> New allowed transition from qemu_t/svirt_t to prelink_mask_t had been added in RHEL6.6. This change is fine according to our SELinux developers. The added SELinux domain is limited and should not cause any issues. See BZ#1103674 for more info. Signed-off-by: Miroslav Vadkerti <mva...@re...> --- audit-test/kvm/test_selinux_trans_from_qemu.bash | 2 +- audit-test/kvm/test_selinux_trans_from_svirt.bash | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/audit-test/kvm/test_selinux_trans_from_qemu.bash b/audit-test/kvm/test_selinux_trans_from_qemu.bash index b9c8118..1802223 100755 --- a/audit-test/kvm/test_selinux_trans_from_qemu.bash +++ b/audit-test/kvm/test_selinux_trans_from_qemu.bash @@ -38,7 +38,7 @@ if [[ $allowed_count -eq 0 ]]; then fi for type in $allowed; do - if [[ ! "$type" =~ smbd_t|ptchown_t|abrt_helper_t|virt_bridgehelper_t ]]; then + if [[ ! "$type" =~ smbd_t|ptchown_t|abrt_helper_t|virt_bridgehelper_t|prelink_mask_t ]]; then exit_fail fi done diff --git a/audit-test/kvm/test_selinux_trans_from_svirt.bash b/audit-test/kvm/test_selinux_trans_from_svirt.bash index 7f82fbe..380ace8 100755 --- a/audit-test/kvm/test_selinux_trans_from_svirt.bash +++ b/audit-test/kvm/test_selinux_trans_from_svirt.bash @@ -38,7 +38,7 @@ if [[ $allowed_count -eq 0 ]]; then fi for type in $allowed; do - if [[ ! "$type" =~ ptchown_t|abrt_helper_t|virt_bridgehelper_t ]]; then + if [[ ! "$type" =~ ptchown_t|abrt_helper_t|virt_bridgehelper_t|prelink_mask_t ]]; then exit_fail fi done -- 1.8.3.1 |
