PERFORCE change 113399 for review

[Todd Miller]

http://perforce.freebsd.org/chv.cgi?CH=113399

Change 113399 by millert at millert_macbook on 2007/01/22 19:59:41

	Update mDNSResponder.

Affected files ...

.. //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/mDNSResponder.te#8 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin8/policies/sedarwin/refpolicy/policy/modules/darwin/mDNSResponder.te#8 (text+ko) ====

@@ -42,7 +42,7 @@
 
 # Talk to self
 allow mDNSResponder_t self:fd use;
-allow mDNSResponder_t self:socket { accept bind create read write };
+allow mDNSResponder_t self:socket { accept bind create connect listen read write };
 allow mDNSResponder_t self:udp_socket create;
 allow mDNSResponder_t self:tcp_socket create;
 allow mDNSResponder_t self:unix_dgram_socket create;
@@ -88,3 +88,9 @@
 
 # read /System
 darwin_allow_system_read(mDNSResponder_t)
+
+# Read /var symlinks
+files_read_var_files(mDNSResponder_t)
+
+# Read /sbin
+allow mDNSResponder_t sbin_t:dir { getattr read search };