diff --git a/policy/modules/kernel/filesystem.if b/policy/modules/kernel/filesystem.if index a5e969ddd..41f196199 100644 --- a/policy/modules/kernel/filesystem.if +++ b/policy/modules/kernel/filesystem.if @@ -2304,6 +2304,24 @@ interface(`fs_manage_hugetlbfs_dirs',` manage_dirs_pattern($1, hugetlbfs_t, hugetlbfs_t) ') +######################################## +## +## Read and write inherited hugetlbfs files. +## +## +## +## Domain allowed access. +## +## +# +interface(`fs_rw_inherited_hugetlbfs_files',` + gen_require(` + type hugetlbfs_t; + ') + + allow $1 hugetlbfs_t:file rw_inherited_file_perms; +') + ######################################## ## ## Read and write hugetlbfs files.