RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

init: split init_create_pid_files interface

This commit is contained in:
bauen1 2020-02-08 16:16:14 +01:00
parent 2b5d1b8299
commit 79ab984197
No known key found for this signature in database
GPG Key ID: FF0AAF5E0812BA9C
2 changed files with 23 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
policy/modules/system/init.if
View File

@ -1400,7 +1400,7 @@ interface(`init_manage_pid_symlinks', `
###################################### ######################################
## <summary> ## <summary>
## Create and write files in the /run/systemd directory. ## Create files in the /run/systemd directory.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -1408,12 +1408,30 @@ interface(`init_manage_pid_symlinks', `
## </summary> ## </summary>
## </param> ## </param>
# #
interface(`init_create_write_pid_files', ` interface(`init_create_pid_files', `
gen_require(` gen_require(`
type init_runtime_t; type init_runtime_t;
') ')
allow $1 init_runtime_t:file { create_file_perms write }; allow $1 init_runtime_t:file create_file_perms;
')
######################################
## <summary>
## Write files in the /run/systemd directory.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`init_write_pid_files', `
gen_require(`
type init_runtime_t;
')
allow $1 init_runtime_t:file write_file_perms;
') ')
###################################### ######################################

3
policy/modules/system/systemd.te
View File

@ -274,10 +274,11 @@ files_search_pids(systemd_fstab_generator_t)
fstools_exec(systemd_fstab_generator_t) fstools_exec(systemd_fstab_generator_t)
init_create_write_pid_files(systemd_fstab_generator_t) init_create_pid_files(systemd_fstab_generator_t)
init_manage_pid_dirs(systemd_fstab_generator_t) init_manage_pid_dirs(systemd_fstab_generator_t)
init_manage_pid_symlinks(systemd_fstab_generator_t) init_manage_pid_symlinks(systemd_fstab_generator_t)
init_search_pids(systemd_fstab_generator_t) init_search_pids(systemd_fstab_generator_t)
init_write_pid_files(systemd_fstab_generator_t)
kernel_read_kernel_sysctls(systemd_fstab_generator_t) kernel_read_kernel_sysctls(systemd_fstab_generator_t)