kernel/files.if: Add files_dontaudit_list_var interface
This is required for an update of the couchdb policy.
This commit is contained in:
parent
22d7dac75b
commit
7381deb292
|
@ -5179,6 +5179,25 @@ interface(`files_list_var',`
|
|||
allow $1 var_t:dir list_dir_perms;
|
||||
')
|
||||
|
||||
########################################
|
||||
## <summary>
|
||||
## Do not audit attempts to list
|
||||
## the contents of /var.
|
||||
## </summary>
|
||||
## <param name="domain">
|
||||
## <summary>
|
||||
## Domain to not audit.
|
||||
## </summary>
|
||||
## </param>
|
||||
#
|
||||
interface(`files_dontaudit_list_var',`
|
||||
gen_require(`
|
||||
type var_t;
|
||||
')
|
||||
|
||||
dontaudit $1 var_t:dir list_dir_perms;
|
||||
')
|
||||
|
||||
########################################
|
||||
## <summary>
|
||||
## Create, read, write, and delete directories
|
||||
|
|
Loading…
Reference in New Issue