Merge pull request #142 from fishilico/mount-search-bin

2019-12-26 11:41:31 -05:00 · 2019-12-26 11:41:31 -05:00 · ce968cefbb
parent 3165b50515 789307d57e
commit ce968cefbb
1 changed files with 2 additions and 0 deletions
--- a/policy/modules/system/mount.if
+++ b/policy/modules/system/mount.if
@ -15,6 +15,7 @@ interface(`mount_domtrans',`
 		type mount_t, mount_exec_t;
 	')

+	corecmd_search_bin($1)
 	domtrans_pattern($1, mount_exec_t, mount_t)
 ')

@ -64,6 +65,7 @@ interface(`mount_exec',`
 	allow $1 mount_exec_t:dir list_dir_perms;

 	allow $1 mount_exec_t:lnk_file read_lnk_file_perms;
+	corecmd_search_bin($1)
 	can_exec($1, mount_exec_t)
 ')