From 0aa6f5b644869d6181e063f1d3b8a4ade17c89ee Mon Sep 17 00:00:00 2001 From: Luis Ressel Date: Mon, 11 Aug 2014 15:33:16 +0200 Subject: [PATCH] system/mount.if: Add mount_rw_loopback_files interface --- policy/modules/system/mount.if | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/policy/modules/system/mount.if b/policy/modules/system/mount.if index fe241865c..8a2105b94 100644 --- a/policy/modules/system/mount.if +++ b/policy/modules/system/mount.if @@ -191,3 +191,21 @@ interface(`mount_read_loopback_files',` allow $1 mount_loopback_t:file read_file_perms; ') + +######################################## +## +## Read and write loopback filesystem image files. +## +## +## +## Domain allowed access. +## +## +# +interface(`mount_rw_loopback_files',` + gen_require(` + type mount_loopback_t; + ') + + allow $1 mount_loopback_t:file rw_file_perms; +')