Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 4 Sep 2003 07:52:35 -0700 (PDT)
From:      Chris Vance <cvance@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 37493 for review
Message-ID:  <200309041452.h84EqZ8B005710@repoman.freebsd.org>

index | next in thread | raw e-mail

http://perforce.freebsd.org/chv.cgi?CH=37493

Change 37493 by cvance@cvance_release on 2003/09/04 07:52:06

	syslogd needs to send signals to a child process

Affected files ...

.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/domains/program/syslogd.te#2 edit

Differences ...

==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/domains/program/syslogd.te#2 (text+ko) ====

@@ -26,7 +26,7 @@
 file_type_auto_trans(syslogd_t, var_run_t, syslogd_var_run_t)
 
 # Use capabilities.
-allow syslogd_t syslogd_t:capability { net_bind_service dac_override };
+allow syslogd_t syslogd_t:capability { kill net_bind_service dac_override };
 
 # Inherit and use descriptors from init.
 allow syslogd_t init_t:fd use;


help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200309041452.h84EqZ8B005710>