diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors index 0ef9b1266..bf241600e 100644 --- a/policy/flask/access_vectors +++ b/policy/flask/access_vectors @@ -153,6 +153,8 @@ inherits file search rmdir open + audit_access + execmod } class file @@ -162,10 +164,16 @@ inherits file entrypoint execmod open + audit_access } class lnk_file inherits file +{ + open + audit_access + execmod +} class chr_file inherits file @@ -174,24 +182,31 @@ inherits file entrypoint execmod open + audit_access } class blk_file inherits file { open + audit_access + execmod } class sock_file inherits file { open + audit_access + execmod } class fifo_file inherits file { open + audit_access + execmod } class fd @@ -363,6 +378,7 @@ class security setbool setsecparam setcheckreqprot + read_policy }