Mailing List Archive

[PATCH 1/4] portage: Dontaudit setattr in portage_dontaudit_write_cache
---
policy/modules/contrib/portage.if | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/contrib/portage.if b/policy/modules/contrib/portage.if
index 640a63b..c98a763 100644
--- a/policy/modules/contrib/portage.if
+++ b/policy/modules/contrib/portage.if
@@ -511,6 +511,6 @@ interface(`portage_dontaudit_write_cache',`
type portage_cache_t;
')

- dontaudit $1 portage_cache_t:dir { write };
+ dontaudit $1 portage_cache_t:dir { setattr write };
')

--
2.6.1
Re: [PATCH 1/4] portage: Dontaudit setattr in portage_dontaudit_write_cache [ In reply to ]
On Thu, Oct 15, 2015 at 12:44:40PM +0200, Luis Ressel wrote:
> ---
> policy/modules/contrib/portage.if | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/policy/modules/contrib/portage.if b/policy/modules/contrib/portage.if
> index 640a63b..c98a763 100644
> --- a/policy/modules/contrib/portage.if
> +++ b/policy/modules/contrib/portage.if
> @@ -511,6 +511,6 @@ interface(`portage_dontaudit_write_cache',`
> type portage_cache_t;
> ')
>
> - dontaudit $1 portage_cache_t:dir { write };
> + dontaudit $1 portage_cache_t:dir { setattr write };
> ')
>
> --
> 2.6.1

Applied this set, thanks!

-- Jason