diff --git a/policy/modules/system/mount.if b/policy/modules/system/mount.if index fe241865c..8a2105b94 100644 --- a/policy/modules/system/mount.if +++ b/policy/modules/system/mount.if @@ -191,3 +191,21 @@ interface(`mount_read_loopback_files',` allow $1 mount_loopback_t:file read_file_perms; ') + +######################################## +## +## Read and write loopback filesystem image files. +## +## +## +## Domain allowed access. +## +## +# +interface(`mount_rw_loopback_files',` + gen_require(` + type mount_loopback_t; + ') + + allow $1 mount_loopback_t:file rw_file_perms; +')