kernel/files.if: Add files_dontaudit_list_var interface

This is required for an update of the couchdb policy.
This commit is contained in:
Luis Ressel 2014-02-01 12:36:49 +01:00 committed by Chris PeBenito
parent 22d7dac75b
commit 7381deb292
1 changed files with 19 additions and 0 deletions

View File

@ -5179,6 +5179,25 @@ interface(`files_list_var',`
allow $1 var_t:dir list_dir_perms;
')
########################################
## <summary>
## Do not audit attempts to list
## the contents of /var.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`files_dontaudit_list_var',`
gen_require(`
type var_t;
')
dontaudit $1 var_t:dir list_dir_perms;
')
########################################
## <summary>
## Create, read, write, and delete directories