diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if index 5302dac43..8f69b851c 100644 --- a/policy/modules/kernel/files.if +++ b/policy/modules/kernel/files.if @@ -1463,7 +1463,25 @@ interface(`files_list_root',` allow $1 root_t:lnk_file { read_lnk_file_perms ioctl lock }; ') -######################################## +############################################################# +## +## Do not audit attempts to write to / dirs. +## +## +## +## Domain to not audit. +## +## +# +interface(`files_dontaudit_write_root_dirs',` + gen_require(` + type root_t; + ') + + dontaudit $1 root_t:dir write; +') + +################### ## ## Do not audit attempts to write ## files in the root directory.