Issue OwlCyberDefense#86: Fix neverallow error caused by toor_t acces…

…sing shadow Fixed in 2fef7c5
mpalmi · Jan 14, 2015 · 32b5227 · 32b5227
1 parent b0cc2fe
commit 32b5227
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/packages/clip-selinux-policy/clip-selinux-policy/policy/modules/kernel/files.if b/packages/clip-selinux-policy/clip-selinux-policy/policy/modules/kernel/files.if
@@ -6691,4 +6691,9 @@ interface(`files_unconfined',`
 	')
 
 	typeattribute $1 files_unconfined_type;
+
+       # SRS: in RHEL 7 - neverallows are being triggered that werent in rhel 6
+       seutil_relabelto_bin_policy($1)
+       auth_relabelto_shadow($1)
+       auth_rw_shadow($1)
 ')