RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix read loopback file interface.

This commit is contained in:
Chris PeBenito 2014-02-08 11:35:57 -05:00
parent 92cd2e251c
commit 3501307078
3 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/kernel/kernel.te
View File

@ -1,4 +1,4 @@
policy_module(kernel, 1.17.4)
policy_module(kernel, 1.17.5)
########################################
#
@ -318,7 +318,7 @@ optional_policy(`
optional_policy(`
mount_use_fds(kernel_t)
mount_read_loopback_file(kernel_t)
mount_read_loopback_files(kernel_t)
')
optional_policy(`

6
policy/modules/system/mount.if
View File

@ -176,7 +176,7 @@ interface(`mount_run_unconfined',`
########################################
## <summary>
## Read mount_loopback files.
## Read loopback filesystem image files.
## </summary>
## <param name="domain">
## <summary>
@ -184,9 +184,9 @@ interface(`mount_run_unconfined',`
## </summary>
## </param>
#
interface(`mount_read_loopback_file',`
interface(`mount_read_loopback_files',`
gen_require(`
type mount_t;
type mount_loopback_t;
')
allow $1 mount_loopback_t:file read_file_perms;

4
policy/modules/system/mount.te
View File

@ -1,4 +1,4 @@
policy_module(mount, 1.16.6)
policy_module(mount, 1.16.7)
########################################
#
@ -43,7 +43,7 @@ application_domain(unconfined_mount_t, mount_exec_t)
# setuid/setgid needed to mount cifs
allow mount_t self:capability { ipc_lock sys_rawio sys_admin dac_override chown sys_tty_config setuid setgid };
mount_read_loopback_file(mount_t)
mount_read_loopback_files(mount_t)
allow mount_t mount_tmp_t:file manage_file_perms;
allow mount_t mount_tmp_t:dir manage_dir_perms;