Add noatsecure to programs using LD_PRELOAD (CoD4, TS3, TF2)

[selinux.git] / ts3 / ts3.te

diff --git a/ts3/ts3.te b/ts3/ts3.te
index 4cf9e8e..95dd7a3 100644 (file)
--- a/ts3/ts3.te
+++ b/ts3/ts3.te
@@ -1,4 +1,4 @@
-policy_module(ts3, 0.1.21)
+policy_module(ts3, 0.1.22)
 
 # File context for the executable process
 type ts3_t;
@@ -21,8 +21,7 @@ corenet_tcp_bind_generic_node(ts3_t)
 
 allow ts3_t self:tcp_socket { create_stream_socket_perms connected_stream_socket_perms };
 
-allow ts3_t ts3_ro_t:dir list_dir_perms;
-allow ts3_t ts3_ro_t:file read_file_perms;
+read_files_pattern(ts3_t, ts3_ro_t, ts3_ro_t)
 
 manage_files_pattern(ts3_t, ts3_rw_t, ts3_rw_t)
 manage_dirs_pattern(ts3_t, ts3_rw_t, ts3_rw_t)
@@ -37,3 +36,5 @@ dev_read_urand(ts3_t)
 
 fs_getattr_tmpfs(ts3_t)
 fs_manage_tmpfs_files(ts3_t)
+
+allow init_t ts3_t:process { noatsecure };