RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-21 18:46:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Introduce kernel_delete_unlabeled_sockets

Browse Source 
The kernel_delete_unlabeled_sockets interface is called by the
(deprecated) files_delete_isid_type_sock_files interface in
kernel/files.if.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2014-08-08 14:33:20 +02:00 committed by Chris PeBenito
parent 54816519d4
commit 1b85e52057
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
policy/modules/kernel/kernel.if
View File

@ -2852,6 +2852,23 @@ interface(`kernel_relabelfrom_unlabeled_sockets',`
allow $1 unlabeled_t:sock_file { getattr relabelfrom }; allow $1 unlabeled_t:sock_file { getattr relabelfrom };
') ')
########################################
## <summary>
## Delete unlabeled named sockets.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`kernel_delete_unlabeled_sockets',`
gen_require(`
type unlabeled_t;
')
delete_sock_files_pattern($1, unlabeled_t, unlabeled_t)
')
######################################## ########################################
## <summary> ## <summary>
## Send and receive messages from an ## Send and receive messages from an