RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #124 from pebenito/watch 

Add watch access vectors.
This commit is contained in:
Chris PeBenito 2019-10-29 07:11:51 -04:00 committed by GitHub
parent 69cd9b4614 c656b97a28
commit b7e5454fac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
INSTALL
View File

@ -1,3 +1,6 @@
Reference Policy has the following runtime requirements:
* Linux kernel >= 2.6.34
Reference Policy has the following build requirements:
* SELinux userspace 2.8
* Python >= 3.4

38
policy/flask/access_vectors
View File

@ -28,6 +28,14 @@ common file
swapon
quotaon
mounton
open
audit_access
execmod
watch
watch_mount
watch_sb
watch_with_perm
watch_reads
}
@ -198,6 +206,7 @@ class filesystem
associate
quotamod
quotaget
watch
}
class dir
@ -208,9 +217,6 @@ inherits file
reparent
search
rmdir
open
audit_access
execmod
}
class file
@ -218,52 +224,26 @@ inherits file
{
execute_no_trans
entrypoint
execmod
open
audit_access
}
class lnk_file
inherits file
{
open
audit_access
execmod
}
class chr_file
inherits file
{
execute_no_trans
entrypoint
execmod
open
audit_access
}
class blk_file
inherits file
{
open
audit_access
execmod
}
class sock_file
inherits file
{
open
audit_access
execmod
}
class fifo_file
inherits file
{
open
audit_access
execmod
}
class fd
{