RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

init: add interfaces for managing /run/systemd

This commit is contained in:
bauen1 2020-02-01 22:06:04 +01:00
parent 6fd33ae70c
commit 4e842fe209
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
1 changed files with 55 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

55
policy/modules/system/init.if
View File

@ -1380,6 +1380,61 @@ interface(`init_list_pids',`
files_search_pids($1)
')
######################################
## <summary>
## Create symbolic links in the /run/systemd directory.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`init_manage_pid_symlinks', `
gen_require(`
type init_runtime_t;
')
allow $1 init_runtime_t:lnk_file create_lnk_file_perms;
')
######################################
## <summary>
## Create and write files in the /run/systemd directory.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`init_create_write_pid_files', `
gen_require(`
type init_runtime_t;
')
allow $1 init_runtime_t:file { create_file_perms write };
')
######################################
## <summary>
## Create, read, write, and delete
## directories in the /run/systemd directory.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`init_manage_pid_dirs', `
gen_require(`
type init_runtime_t;
')
manage_dirs_pattern($1, init_runtime_t, init_runtime_t)
')
########################################
## <summary>
## Create files in an init PID directory.