summaryrefslogtreecommitdiff
path: root/community/gradm
diff options
context:
space:
mode:
authorNicolás Reynolds <fauno@endefensadelsl.org>2014-07-18 04:05:10 +0000
committerNicolás Reynolds <fauno@endefensadelsl.org>2014-07-18 04:05:10 +0000
commit9959727f4ef9acd6805bb372e98323a01468246e (patch)
tree52c209bd97c5b9ab6217c75dbf67bdc425775341 /community/gradm
parent0a765aad3e78dae0cc72b1a255b39a071f018963 (diff)
Fri Jul 18 04:02:21 UTC 2014
Diffstat (limited to 'community/gradm')
-rw-r--r--community/gradm/PKGBUILD6
-rw-r--r--community/gradm/policy2
2 files changed, 5 insertions, 3 deletions
diff --git a/community/gradm/PKGBUILD b/community/gradm/PKGBUILD
index 0df9b8c45..f7ad64f4b 100644
--- a/community/gradm/PKGBUILD
+++ b/community/gradm/PKGBUILD
@@ -7,7 +7,7 @@
pkgname=gradm
_version=3.0
-_timestamp=201405281853
+_timestamp=201407162022
pkgver=3.0.$_timestamp
pkgrel=1
pkgdesc="Administration utility for grsecurity's Role Based Access Control (RBAC)"
@@ -19,10 +19,10 @@ source=(https://grsecurity.net/stable/$pkgname-$_version-$_timestamp.tar.gz
https://grsecurity.net/stable/$pkgname-$_version-$_timestamp.tar.gz.sig
learn_config
policy)
-sha256sums=('4ee8a4e3a658f14b58c55fb8c5a9d3234e0ec87cf90a886499918553a15c557a'
+sha256sums=('300d119f584644a4698cf6c9125fa0cd17a7ff00b4f7885fe782828b93881e1b'
'SKIP'
'704ea6ba7f748761735cbe1cf52ef04f53eab1a1e9ea1bdcb6abaaf4a641e44d'
- 'c2fb8e696969530c4dc707c59cdc608df6c21d6226979dfeadef92c51deabc5e')
+ '0d069e28845f789d0e9da82fc6dffa368ab71b2ca4ab37e0d3e3c6951e82d98a')
prepare() {
cd $pkgname
diff --git a/community/gradm/policy b/community/gradm/policy
index 395eec321..9d97a2a99 100644
--- a/community/gradm/policy
+++ b/community/gradm/policy
@@ -385,6 +385,7 @@ subject /usr/bin/sshd dpo
/root
/proc r
/proc/*/oom_adj rw
+ /proc/*/oom_score_adj rw
/proc/kcore h
/proc/sys h
/proc/sys/kernel/ngroups_max r
@@ -412,6 +413,7 @@ subject /usr/bin/sshd dpo
+CAP_SYS_RESOURCE
+CAP_SYS_TTY_CONFIG
+CAP_AUDIT_WRITE
+ +CAP_KILL
# to access user keys
+CAP_DAC_OVERRIDE