Changeset 79 for selinux/set_booleans.sh

Timestamp:

Jan 19, 2007, 6:58:44 AM (17 years ago)

Author:

presbrey

Message:

vixie-cron executes as the user under SELinux
SELinux policy for afsd and afsagent

File:

• selinux/set_booleans.sh (modified) (3 diffs)

selinux/set_booleans.sh

@@ -1 +1 @@
 #!/bin/bash
 
-setsebool -P allow_kerberos=1 \
+setsebool -P \
+        allow_gssd_read_tmp=1 \
         allow_httpd_anon_write=1 \
         allow_httpd_staff_script_anon_write=1 \
@@ -8 +9 @@
         allow_httpd_user_script_anon_write=1 \
         allow_java_execstack=1 \
+        allow_kerberos=1 \
+        allow_mounton_anydir=1 \
+        allow_nfsd_anon_write=1 \
+        allow_ssh_keysign=1 \
         allow_user_mysql_connect=1 \
         cron_can_relabel=1 \
@@ -21 +26 @@
         nfs_export_all_rw=1 \
         ssh_sysadm_login=1 \
-        staff_read_sysadm_file=1 \
         use_nfs_home_dirs=1 \
         use_samba_home_dirs=1 \
         user_ping=1 \
-        user_rw_noexattrfile=1
+        user_rw_noexattrfile=1 \
+        user_tcp_server=1
+#       allow_daemons_use_tty=1 \
+#       allow_mount_anyfile=1 \
+#       staff_read_sysadm_file=1 \