RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

devices: introduce dev_dontaudit_read_sysfs 

Signed-off-by: Jason Zaman <jason@perfinion.com>
This commit is contained in:
Jason Zaman 2019-01-12 16:03:40 +08:00 committed by Chris PeBenito
parent 7a1e0d0ca9
commit 1bc0503d53
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
policy/modules/kernel/devices.if
View File

@ -4043,6 +4043,26 @@ interface(`dev_dontaudit_getattr_sysfs',`
dontaudit $1 sysfs_t:filesystem getattr;
')
########################################
## <summary>
## Dont audit attempts to read hardware state information
## </summary>
## <param name="domain">
## <summary>
## Domain for which the attempts do not need to be audited
## </summary>
## </param>
#
interface(`dev_dontaudit_read_sysfs',`
gen_require(`
type sysfs_t;
')
dontaudit $1 sysfs_t:file read_file_perms;
dontaudit $1 sysfs_t:dir list_dir_perms;
dontaudit $1 sysfs_t:lnk_file read_lnk_file_perms;
')
########################################
## <summary>
## mounton sysfs directories.