Issue OwlCyberDefense#134 - Let toor_t start/stop/restart/status syst…

…emd services
mpalmi · Aug 28, 2015 · 8ed420e · 8ed420e
1 parent 0166907
commit 8ed420e
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/CONFIG_REPOS b/CONFIG_REPOS
@@ -39,3 +39,4 @@ rhel = /opt/rhel-7-x86_64/rhel-x86_64-server-7/Packages/
 # WARNING: The CLIP team is no longer testing or supporting RHEL 5 builds from this tree.  
 #          It might work, but probably will not.  
 #buildgroups = /mnt/repos/buildgroups
+opt = /home/mpalmiotto/opt/
diff --git a/packages/clip-selinux-policy/clip-selinux-policy/policy/modules/roles/toor.te b/packages/clip-selinux-policy/clip-selinux-policy/policy/modules/roles/toor.te
@@ -462,3 +462,12 @@ ifndef(`distro_redhat',`
 	')
 ')
 
+ifdef(`init_systemd',`
+	optional_policy(`
+		systemd_start_unit_services(toor_t)
+		systemd_start_power_unit_services(toor_t)
+		systemd_stop_unit_services(toor_t)
+		systemd_status_unit_services(toor_t)
+		logging_send_audit_msgs(toor_t)
+	')
+')
diff --git a/packages/clip-selinux-policy/clip-selinux-policy/policy/modules/system/modutils.te b/packages/clip-selinux-policy/clip-selinux-policy/policy/modules/system/modutils.te
@@ -328,3 +328,5 @@ ifdef(`distro_ubuntu',`
 		unconfined_domain(update_modules_t)
 	')
 ')
+
+kernel_search_key(insmod_t)
-Original file line number
+Diff line change
@@ Expand Up / @@ -328,3 +328,5 @@ ifdef(`distro_ubuntu',` @@
     		unconfined_domain(update_modules_t)
     	')
     ')
+    kernel_search_key(insmod_t)