nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

init: add interface to run init bpf programs

Browse Source 
Signed-off-by: Kenton Groombridge <me@concord.sh>
This commit is contained in:
Kenton Groombridge 2021-10-11 15:36:00 -04:00
parent c9eb093f2b
commit 582f390f85
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/system/init.if
View File

@ -1299,6 +1299,25 @@ interface(`init_dbus_chat',`
allow init_t $1:dbus send_msg;
')
########################################
## <summary>
## Run init BPF programs.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`init_run_bpf',`
gen_require(`
type init_t;
class bpf prog_run;
')
allow $1 init_t:bpf prog_run;
')
########################################
## <summary>
## read/follow symlinks under /var/lib/systemd/