Merge branch 'files_search_src' of git://github.com/cgzones/refpolicy

This commit is contained in:
Chris PeBenito 2017-01-09 18:12:38 -05:00
commit 9387d5c324
1 changed files with 18 additions and 0 deletions

View File

@ -5212,6 +5212,24 @@ interface(`files_usr_filetrans',`
filetrans_pattern($1, usr_t, $2, $3, $4)
')
########################################
## <summary>
## Search directories in /usr/src.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`files_search_src',`
gen_require(`
type src_t;
')
allow $1 src_t:dir search_dir_perms;
')
########################################
## <summary>
## Do not audit attempts to search /usr/src.