RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Introduce portage_dontaudit_use_fds 

Support the interface to not audit portage_t:fd use (file descriptors, leaked
or not)

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2011-08-23 15:39:13 +02:00 committed by Chris PeBenito
parent 68bbbbdec6
commit 137f7366ee
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/admin/portage.if
View File

@ -293,3 +293,22 @@ interface(`portage_dontaudit_rw_tmp_files',`
dontaudit $1 portage_tmp_t:file rw_file_perms; dontaudit $1 portage_tmp_t:file rw_file_perms;
') ')
########################################
## <summary>
## Do not audit attempts to use
## portage file descriptors.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`portage_dontaudit_use_fds',`
gen_require(`
type portage_t;
')
dontaudit $1 portage_t:fds use;
')