Introduce kernel_delete_unlabeled_sockets

The kernel_delete_unlabeled_sockets interface is called by the
(deprecated) files_delete_isid_type_sock_files interface in
kernel/files.if.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2014-08-08 14:33:20 +02:00 committed by Chris PeBenito
parent 54816519d4
commit 1b85e52057
1 changed files with 17 additions and 0 deletions

View File

@ -2852,6 +2852,23 @@ interface(`kernel_relabelfrom_unlabeled_sockets',`
allow $1 unlabeled_t:sock_file { getattr relabelfrom };
')
########################################
## <summary>
## Delete unlabeled named sockets.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`kernel_delete_unlabeled_sockets',`
gen_require(`
type unlabeled_t;
')
delete_sock_files_pattern($1, unlabeled_t, unlabeled_t)
')
########################################
## <summary>
## Send and receive messages from an