RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

refpol: Add the "tun_socket" object class flask definitions 

Add the new "tun_socket" class to the flask definitions.  The "tun_socket"
object class is used by the new TUN driver hooks which allow policy to control
access to TUN/TAP devices.

Signed-off-by: Paul Moore <paul.moore@hp.com>
This commit is contained in:
Paul Moore 2009-08-28 17:13:06 -04:00 committed by Chris PeBenito
parent 4279891d1f
commit 333494fd59
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/flask/access_vectors
View File

@ -251,6 +251,8 @@ inherits socket
class unix_dgram_socket class unix_dgram_socket
inherits socket inherits socket
class tun_socket
inherits socket
# #
# Define the access vector interpretation for process-related objects # Define the access vector interpretation for process-related objects

2
policy/flask/security_classes
View File

@ -119,4 +119,6 @@ class x_application_data # userspace
# kernel services that need to override task security, e.g. cachefiles # kernel services that need to override task security, e.g. cachefiles
class kernel_service class kernel_service
class tun_socket
# FLASK # FLASK