From f39eeece2fb8bba37b5f54efcd4e26089f872db6 Mon Sep 17 00:00:00 2001 From: Guido Trentalancia Date: Wed, 16 Feb 2011 07:33:46 +0100 Subject: [PATCH] patch to add a missing interface in the sysnetwork module This patch adds a new interface to the sysnetwork module so that the DHCP client state directories can be searched. --- policy/modules/system/sysnetwork.if | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/policy/modules/system/sysnetwork.if b/policy/modules/system/sysnetwork.if index 8e71fb7af..4ac0d73f6 100644 --- a/policy/modules/system/sysnetwork.if +++ b/policy/modules/system/sysnetwork.if @@ -213,6 +213,26 @@ interface(`sysnet_rw_dhcp_config',` allow $1 dhcp_etc_t:file rw_file_perms; ') +######################################## +## +## Search the DHCP client state +## directories. +## +## +## +## Domain allowed access. +## +## +# +interface(`sysnet_search_dhcpc_state',` + gen_require(` + type dhcpc_state_t; + ') + + files_search_var_lib($1) + allow $1 dhcpc_state_t:dir search_dir_perms; +') + ######################################## ## ## Read dhcp client state files.