Introduce kernel_delete_unlabeled_sockets
The kernel_delete_unlabeled_sockets interface is called by the (deprecated) files_delete_isid_type_sock_files interface in kernel/files.if. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
parent
54816519d4
commit
1b85e52057
|
@ -2852,6 +2852,23 @@ interface(`kernel_relabelfrom_unlabeled_sockets',`
|
|||
allow $1 unlabeled_t:sock_file { getattr relabelfrom };
|
||||
')
|
||||
|
||||
########################################
|
||||
## <summary>
|
||||
## Delete unlabeled named sockets.
|
||||
## </summary>
|
||||
## <param name="domain">
|
||||
## <summary>
|
||||
## Domain allowed access.
|
||||
## </summary>
|
||||
## </param>
|
||||
#
|
||||
interface(`kernel_delete_unlabeled_sockets',`
|
||||
gen_require(`
|
||||
type unlabeled_t;
|
||||
')
|
||||
|
||||
delete_sock_files_pattern($1, unlabeled_t, unlabeled_t)
|
||||
')
|
||||
########################################
|
||||
## <summary>
|
||||
## Send and receive messages from an
|
||||
|
|
Loading…
Reference in New Issue