52 lines
1.9 KiB
Diff
52 lines
1.9 KiB
Diff
From 37512b85ed2712a57370c9df57db84b96b3d0f9d Mon Sep 17 00:00:00 2001
|
|
From: Nikola Knazekova <nknazeko@redhat.com>
|
|
Date: Wed, 13 Jul 2022 18:12:31 +0200
|
|
Subject: [PATCH] Update winbind_rpcd_t
|
|
|
|
Allow smbcontrol send winbind_rpcd_t unix_dgram_socket
|
|
Allow winbind_rpcd_t to write winbind_var_run_t sock files
|
|
Allow winbind_rpcd_t connect to winbind_t over unix_stream_socket
|
|
Allow winbind_rpcd_t to connect to systemd-userdbd with a unix socket
|
|
|
|
Fix: rhbz#2102084
|
|
---
|
|
policy/modules/contrib/samba.te | 8 ++++++++
|
|
1 file changed, 8 insertions(+)
|
|
|
|
diff --git a/policy/modules/contrib/samba.te b/policy/modules/contrib/samba.te
|
|
index 4be4401cda..61598b8e39 100644
|
|
--- a/policy/modules/contrib/samba.te
|
|
+++ b/policy/modules/contrib/samba.te
|
|
@@ -745,6 +745,7 @@ allow smbcontrol_t samba_var_t:file map;
|
|
|
|
allow smbcontrol_t nmbd_t:unix_dgram_socket sendto;
|
|
allow smbcontrol_t smbd_t:unix_dgram_socket sendto;
|
|
+allow smbcontrol_t winbind_rpcd_t:unix_dgram_socket sendto;
|
|
allow smbcontrol_t winbind_t:unix_dgram_socket sendto;
|
|
|
|
samba_read_config(smbcontrol_t)
|
|
@@ -1175,6 +1176,8 @@ allow winbind_rpcd_t winbind_rpcd_exec_t:file execute_no_trans;
|
|
|
|
read_files_pattern(winbind_rpcd_t, samba_etc_t, samba_etc_t)
|
|
|
|
+write_sock_files_pattern(winbind_rpcd_t, winbind_var_run_t, winbind_var_run_t)
|
|
+
|
|
manage_files_pattern(winbind_rpcd_t, winbind_rpcd_var_run_t, winbind_rpcd_var_run_t)
|
|
files_pid_filetrans(winbind_rpcd_t, winbind_rpcd_var_run_t, { dir file })
|
|
|
|
@@ -1229,9 +1232,14 @@ optional_policy(`
|
|
sysnet_read_config(winbind_rpcd_t)
|
|
')
|
|
|
|
+optional_policy(`
|
|
+ systemd_userdbd_stream_connect(winbind_rpcd_t)
|
|
+')
|
|
+
|
|
# interactions with smbd_t/winbind_t
|
|
allow smbd_t winbind_rpcd_t:unix_stream_socket connectto;
|
|
allow winbind_t winbind_rpcd_t:unix_stream_socket connectto;
|
|
+allow winbind_rpcd_t winbind_t:unix_stream_socket connectto;
|
|
|
|
samba_domtrans_winbind_rpcd(smbd_t)
|
|
samba_domtrans_winbind_rpcd(winbind_t)
|