RepoMirrors/selinux-refpolicy
1
0
Fork 0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-11 07:40:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #260 from cgzones/can_exec

Browse Source 
can_exec(): move from misc_macros to misc_patterns
This commit is contained in:
Chris PeBenito 2020-05-22 14:21:20 -04:00 committed by GitHub
commit f60bdf2d1b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
policy/support/misc_macros.spt
View File

@ -62,12 +62,6 @@ user $1 roles { $3 }`'ifdef(`enable_mls', ` level $4 range $5')`'ifdef(`enable_m
#
define(`gen_context',`$1`'ifdef(`enable_mls',`:$2')`'ifdef(`enable_mcs',`:s0`'ifelse(`$3',,,`:$3')')')dnl
########################################
#
# can_exec(domain,executable)
#
define(`can_exec',`allow $1 $2:file { mmap_exec_file_perms ioctl lock execute_no_trans };')
########################################
#
# gen_bool(name,default_value)

9
policy/support/misc_patterns.spt
View File

@ -111,3 +111,12 @@ define(`admin_process_pattern',`
allow $1 $2:process { ptrace signal_perms };
')
#
# File execution pattern
#
# Parameters:
# 1. source domain
# 2. executable file type
#
define(`can_exec',`allow $1 $2:file { mmap_exec_file_perms ioctl lock execute_no_trans };')