From 8d8c849428ee45b8a128de701db45b62d82c13ea Mon Sep 17 00:00:00 2001
From: Luis Ressel <aranea@aixah.de>
Date: Tue, 6 Dec 2016 23:49:02 +0100
Subject: [PATCH] kernel.if: Allow listing /proc/sys/net/unix
The kernel_read_unix_sysctls() and kernel_rw_unix_sysctls() currenly
don't allow listing the /proc/sys/net/unix directory, contrary to the
other sysctl interfaces.
---
policy/modules/kernel/kernel.if | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if
index 0ca25406a..f03a3241d 100644
--- a/policy/modules/kernel/kernel.if
+++ b/policy/modules/kernel/kernel.if
@@ -1758,7 +1758,7 @@ interface(`kernel_read_unix_sysctls',`
read_files_pattern($1, { proc_t sysctl_t sysctl_net_t }, sysctl_net_unix_t)
- list_dirs_pattern($1, { proc_t sysctl_t }, sysctl_net_t)
+ list_dirs_pattern($1, { proc_t sysctl_t }, { sysctl_net_t sysctl_net_unix_t })
')
########################################
@@ -1780,7 +1780,7 @@ interface(`kernel_rw_unix_sysctls',`
rw_files_pattern($1, { proc_t sysctl_t sysctl_net_t }, sysctl_net_unix_t)
- list_dirs_pattern($1, { proc_t sysctl_t }, sysctl_net_t)
+ list_dirs_pattern($1, { proc_t sysctl_t }, { sysctl_net_t sysctl_net_unix_t })
')
########################################