RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-04-01 22:58:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

files: introduce files_dontaudit_read_etc_files

Browse Source 
Signed-off-by: Jason Zaman <jason@perfinion.com>
This commit is contained in:
Jason Zaman 2019-01-12 16:03:41 +08:00 committed by Chris PeBenito
parent 1bc0503d53
commit d83a104eda
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/kernel/files.if
View File

@ -3403,6 +3403,25 @@ interface(`files_dontaudit_read_etc_runtime_files',`
dontaudit $1 etc_runtime_t:file { getattr read }; dontaudit $1 etc_runtime_t:file { getattr read };
') ')
########################################
## <summary>
## Do not audit attempts to read files
## in /etc
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`files_dontaudit_read_etc_files',`
gen_require(`
type etc_t;
')
dontaudit $1 etc_t:file { getattr read };
')
######################################## ########################################
## <summary> ## <summary>
## Do not audit attempts to write ## Do not audit attempts to write