Add file and filesystem watch access vectors.

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
2019-10-25 15:46:00 -04:00 · 2019-10-25 15:46:00 -04:00 · c656b97a28
parent e5dbe75276
commit c656b97a28
1 changed files with 6 additions and 0 deletions
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@ -31,6 +31,11 @@ common file
 	open
 	audit_access
 	execmod
+	watch
+	watch_mount
+	watch_sb
+	watch_with_perm
+	watch_reads
 }


@ -201,6 +206,7 @@ class filesystem
 	associate
 	quotamod
 	quotaget
+	watch
 }

 class dir