diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if index ed7667a53..9d6df6d10 100644 --- a/policy/modules/kernel/kernel.if +++ b/policy/modules/kernel/kernel.if @@ -676,6 +676,24 @@ interface(`kernel_dontaudit_search_debugfs',` dontaudit $1 debugfs_t:dir search_dir_perms; ') +######################################## +## +## Do not audit attempts to write kernel debugging filesystem dirs. +## +## +## +## Domain to not audit. +## +## +# +interface(`kernel_dontaudit_write_debugfs_dirs',` + gen_require(` + type debugfs_t; + ') + + dontaudit $1 debugfs_t:dir write; +') + ######################################## ## ## Read information from the debugging filesystem. @@ -805,6 +823,25 @@ interface(`kernel_dontaudit_list_proc',` dontaudit $1 proc_t:dir list_dir_perms; ') +######################################## +## +## Do not audit attempts to write the +## directories in /proc. +## +## +## +## Domain to not audit. +## +## +# +interface(`kernel_dontaudit_write_proc_dirs',` + gen_require(` + type proc_t; + ') + + dontaudit $1 proc_t:dir write; +') + ######################################## ## ## Get the attributes of files in /proc.