RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Podsleuth patch from Dan Walsh. 

podsleuth asks the kernel to load modules
Reads/write removable blk device.

Reads user_tmpfs
This commit is contained in:
Chris PeBenito 2010-06-22 09:01:38 -04:00
parent 8a24097bff
commit 1ff703fc4a
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/apps/podsleuth.te
View File

@ -1,4 +1,4 @@
policy_module(podsleuth, 1.3.0)
policy_module(podsleuth, 1.3.1)
########################################
#
@ -49,6 +49,7 @@ manage_lnk_files_pattern(podsleuth_t, podsleuth_tmpfs_t, podsleuth_tmpfs_t)
fs_tmpfs_filetrans(podsleuth_t, podsleuth_tmpfs_t, { dir file lnk_file })
kernel_read_system_state(podsleuth_t)
kernel_request_load_module(podsleuth_t)
corecmd_exec_bin(podsleuth_t)
@ -65,12 +66,14 @@ fs_read_dos_files(podsleuth_t)
fs_search_dos(podsleuth_t)
fs_getattr_tmpfs(podsleuth_t)
fs_list_tmpfs(podsleuth_t)
fs_rw_removable_blk_files(podsleuth_t)
miscfiles_read_localization(podsleuth_t)
sysnet_dns_name_resolve(podsleuth_t)
userdom_signal_unpriv_users(podsleuth_t)
userdom_read_user_tmpfs_files(podsleuth_t)
optional_policy(`
dbus_system_bus_client(podsleuth_t)