commit: 8633756a1c6a363cd56ef5571b6266b8849ca10c
Author: Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Mon Jan 2 18:10:39 2017 +0000
Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Fri Jan 13 18:40:45 2017 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=8633756a
boinc: Update from Russell Coker.
policy/modules/contrib/boinc.te | 10 +++++++++-
1 file changed, 9 insertions(+), 1 deletion(-)
diff --git a/policy/modules/contrib/boinc.te b/policy/modules/contrib/boinc.te
index 557c8f9..0296cd1 100644
--- a/policy/modules/contrib/boinc.te
+++ b/policy/modules/contrib/boinc.te
@@ -1,4 +1,4 @@
-policy_module(boinc, 1.4.0)
+policy_module(boinc, 1.4.1)
########################################
#
@@ -85,6 +85,7 @@ domtrans_pattern(boinc_t, boinc_project_var_lib_t,
boinc_project_t)
kernel_read_system_state(boinc_t)
kernel_search_vm_sysctl(boinc_t)
+kernel_read_crypto_sysctls(boinc_t)
corenet_all_recvfrom_unlabeled(boinc_t)
corenet_all_recvfrom_netlabel(boinc_t)
@@ -155,6 +156,13 @@ optional_policy(`
sysnet_dns_name_resolve(boinc_t)
')
+optional_policy(`
+ corenet_tcp_connect_xserver_port(boinc_t)
+
+ xserver_list_xdm_tmp(boinc_t)
+ xserver_non_drawing_client(boinc_t)
+')
+
########################################
#
# Project local policy