diff --git a/policy/modules/kernel/selinux.if b/policy/modules/kernel/selinux.if index bf70d3c45..43eebcd0f 100644 --- a/policy/modules/kernel/selinux.if +++ b/policy/modules/kernel/selinux.if @@ -444,6 +444,30 @@ interface(`selinux_set_all_booleans',` } ') +######################################## +## +## Allow caller to get the state of all Booleans to +## view conditional portions of the policy. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`selinux_get_all_booleans',` + gen_require(` + type security_t; + attribute boolean_type; + ') + + dev_search_sysfs($1) + + allow $1 security_t:dir list_dir_perms; + allow $1 boolean_type:file read_file_perms; +') + ######################################## ## ## Allow caller to set SELinux access vector cache parameters.