nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Keep context of blkid file/dir when created by zpool.

Browse Source 
Signed-off-by: Grzegorz Filo <gf578@wp.pl>
This commit is contained in:
Grzegorz Filo 2023-05-10 16:15:07 +02:00
parent 8f563f58ea
commit 80d52aa4f6
2 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
policy/modules/services/zfs.te
View File

@ -128,6 +128,11 @@ userdom_use_user_terminals(zfs_t)
zfs_rw_zpool_cache(zfs_t)
optional_policy(`
fstools_manage_runtime_files(zfs_t)
fstools_runtime_filetrans(zfs_t, dir, "blkid")
')
optional_policy(`
kernel_rw_rpc_sysctls(zfs_t)

28
policy/modules/system/fstools.if
View File

@ -321,3 +321,31 @@ interface(`fstools_manage_swap_files',`
allow $1 swapfile_t:file manage_file_perms;
')
########################################
## <summary>
## Create objects in the runtime directory with an automatic type transition to the fsadm runtime type.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <param name="object">
## <summary>
## The object class of the object being created.
## </summary>
## </param>
## <param name="name" optional="true">
## <summary>
## The name of the object being created.
## </summary>
## </param>
#
interface(`fstools_runtime_filetrans',`
gen_require(`
type fsadm_run_t;
')
files_runtime_filetrans($1, fsadm_run_t, $2, $3)
')