Label /var/lib/softhsm as named_cache_t. Allow named_t to manage name…

…d_cache_t dirs.
dodys · Jun 27, 2016 · 870fd95 · 870fd95
1 parent 91c80b9
commit 870fd95
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/bind.fc b/bind.fc
@@ -52,6 +52,7 @@ ifdef(`distro_redhat',`
 /etc/named\.root\.hints	--	gen_context(system_u:object_r:named_conf_t,s0)
 /etc/named\.conf	--	gen_context(system_u:object_r:named_conf_t,s0)
 /etc/named\.caching-nameserver\.conf -- gen_context(system_u:object_r:named_conf_t,s0)
+/var/lib/softhsm(/.*)? 		gen_context(system_u:object_r:named_cache_t,s0)
 /var/lib/unbound(/.*)? 		gen_context(system_u:object_r:named_cache_t,s0)
 /var/named(/.*)?		gen_context(system_u:object_r:named_zone_t,s0)
 /var/named/slaves(/.*)?		gen_context(system_u:object_r:named_cache_t,s0)

diff --git a/bind.te b/bind.te
@@ -88,6 +88,7 @@ allow named_t named_conf_t:dir list_dir_perms;
 read_files_pattern(named_t, named_conf_t, named_conf_t)
 read_lnk_files_pattern(named_t, named_conf_t, named_conf_t)
 
+manage_dirs_pattern(named_t, named_cache_t, named_cache_t)
 manage_files_pattern(named_t, named_cache_t, named_cache_t)
 manage_lnk_files_pattern(named_t, named_cache_t, named_cache_t)