From owner-p4-projects@FreeBSD.ORG Tue Dec 2 07:57:54 2003 Return-Path: Delivered-To: p4-projects@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 32767) id E4ADF16A4D0; Tue, 2 Dec 2003 07:57:53 -0800 (PST) Delivered-To: perforce@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B320D16A4CE for ; Tue, 2 Dec 2003 07:57:53 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4D69F43FBF for ; Tue, 2 Dec 2003 07:57:52 -0800 (PST) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.9/8.12.9) with ESMTP id hB2FvpXJ045993 for ; Tue, 2 Dec 2003 07:57:52 -0800 (PST) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Received: (from perforce@localhost) by repoman.freebsd.org (8.12.9/8.12.9/Submit) id hB2FvpUE045990 for perforce@freebsd.org; Tue, 2 Dec 2003 07:57:51 -0800 (PST) (envelope-from bb+lists.freebsd.perforce@cyrus.watson.org) Date: Tue, 2 Dec 2003 07:57:51 -0800 (PST) Message-Id: <200312021557.hB2FvpUE045990@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: perforce set sender to bb+lists.freebsd.perforce@cyrus.watson.org using -f From: Robert Watson To: Perforce Change Reviews Subject: PERFORCE change 43298 for review X-BeenThere: p4-projects@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: p4 projects tree changes List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Dec 2003 15:57:54 -0000 http://perforce.freebsd.org/chv.cgi?CH=43298 Change 43298 by rwatson@rwatson_fledge on 2003/12/02 07:56:57 Add permission to /dev/zero. Affected files ... .. //depot/projects/trustedbsd/sedarwin/policy/rules#4 edit Differences ... ==== //depot/projects/trustedbsd/sedarwin/policy/rules#4 (text+ko) ==== @@ -66,7 +66,7 @@ allow domain file:{file lnk_file sock_file} {create_file_perms execute }; allow domain file:file execute_no_trans; allow domain file:dir { create_dir_perms }; -allow domain {null_device_t console_device_t memory_device_t random_device_t device_t}:{file chr_file} create_file_perms; +allow domain {null_device_t console_device_t memory_device_t random_device_t zero_device_t device_t}:{file chr_file} create_file_perms; allow domain device_t:blk_file create_file_perms; allow domain {devpts_t user_devpts_t sysadm_devpts_t}:chr_file create_file_perms; allow domain domain:process { signal sigkill setsched getsession };