RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

screen: add interface to dontaudit runtime sock file 

Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2022-06-05 10:39:01 -04:00
parent 80cbe18d72
commit 21c7e6c2e1
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/apps/screen.if
View File

@ -120,3 +120,21 @@ interface(`screen_execute_sock_file',`
allow $1 screen_runtime_t:sock_file execute; allow $1 screen_runtime_t:sock_file execute;
allow $1 screen_tmp_t:dir search; allow $1 screen_tmp_t:dir search;
') ')
########################################
## <summary>
## Do not audit attempts to get the attributes
## of the screen runtime named socket.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
interface(`screen_dontaudit_getattr_sock_file',`
gen_require(`
type screen_runtime_t;
')
dontaudit $1 screen_runtime_t:sock_file getattr;
')