PERFORCE change 21369 for review

[Chris Vance]

http://perforce.freebsd.org/chv.cgi?CH=21369

Change 21369 by cvance at cvance_laptop on 2002/11/22 06:29:50

	Label /var/log/fs-errors with a new type, and allow xfs to read/write
	to it.

Affected files ...

.. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/xfs.te#2 edit
.. //depot/projects/trustedbsd/mac/contrib/sebsd/policy/file_contexts/program/xfs.fc#4 edit

Differences ...

==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/domains/program/xfs.te#2 (text+ko) ====

@@ -31,3 +31,6 @@
 # Bind to /tmp/.font-unix/fs-1.
 allow xfs_t xfs_tmp_t:unix_stream_socket name_bind;
 
+# Default FreeBSD install uses /var/log/fs-errors for error log
+type xfs_errorlog_t, file_type, sysadmfile;
+allow xfs_t xfs_errorlog_t:file rw_file_perms;

==== //depot/projects/trustedbsd/mac/contrib/sebsd/policy/file_contexts/program/xfs.fc#4 (text+ko) ====

@@ -1,3 +1,4 @@
 # xfs
 /tmp/.font-unix(/.*)?		system_u:object_r:xfs_tmp_t
 /usr/X11R6/bin/xfs		system_u:object_r:xfs_exec_t
+/var/log/fs-errors		system_u:object_r:xfs_errorlog_t
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message