+- Drop snmpd_etc_t.
- Confine sendmail and logrotate on targeted.
- Tunable connection to postgresql for users from KaiGai Kohei.
- Memprotect support patch from Stephen Smalley.
-policy_module(files,1.5.0)
+policy_module(files,1.5.1)
########################################
#
files_type(etc_t)
# compatibility aliases for removed types:
typealias etc_t alias automount_etc_t;
+typealias etc_t alias snmpd_etc_t;
#
# etc_runtime_t is the type of various
-policy_module(snmp,1.4.2)
+policy_module(snmp,1.4.3)
########################################
#
type snmpd_exec_t;
init_daemon_domain(snmpd_t,snmpd_exec_t)
-type snmpd_etc_t;
-files_config_file(snmpd_etc_t)
-
type snmpd_log_t;
logging_log_file(snmpd_log_t)
allow snmpd_t self:tcp_socket create_stream_socket_perms;
allow snmpd_t self:udp_socket connected_stream_socket_perms;
-allow snmpd_t snmpd_etc_t:file { getattr read };
-
allow snmpd_t snmpd_log_t:file manage_file_perms;
logging_log_filetrans(snmpd_t,snmpd_log_t,file)