RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

For virtd lxc 

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
This commit is contained in:
Dominick Grift 2012-10-21 14:20:17 +02:00 committed by Chris PeBenito
parent f4a0be2dfc
commit f980fd9208
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
policy/modules/kernel/files.if
View File

@ -1872,6 +1872,24 @@ interface(`files_delete_root_dir_entry',`
allow $1 root_t:dir rw_dir_perms; allow $1 root_t:dir rw_dir_perms;
') ')
########################################
## <summary>
## Relabel to and from rootfs file system.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`files_relabel_rootfs',`
gen_require(`
type root_t;
')
allow $1 root_t:filesystem { relabelto relabelfrom };
')
######################################## ########################################
## <summary> ## <summary>
## Unmount a rootfs filesystem. ## Unmount a rootfs filesystem.