1
0
mirror of https://github.com/SELinuxProject/refpolicy synced 2025-03-23 11:36:35 +00:00
selinux-refpolicy/policy/modules/kernel
Nicolas Iooss 98a298f8a1 storage: introduce storage_raw_read_fixed_disk_cond
As adding attribute fixed_disk_raw_read to a type cannot occur in a
conditional statement, create a new interface that takes a tunable as
parameter to allow a dangerous access conditionally.

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
2020-01-12 21:57:17 +01:00
..
corecommands.fc fix ifupdown2 executable mislabeled as lib_t 2019-12-10 20:18:00 +01:00
corecommands.if Add new mmap permission set and pattern support macros. 2017-12-13 18:58:34 -05:00
corecommands.te various: Module version bump. 2019-12-26 11:48:27 -05:00
corenetwork.fc Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker. 2017-02-04 15:19:35 -05:00
corenetwork.if.in Remove undeclared identifiers from interfaces 2018-04-12 18:44:50 -04:00
corenetwork.if.m4 refpolicy: Infiniband pkeys and endports 2017-05-24 19:23:18 -04:00
corenetwork.te.in various: Module version bump. 2019-09-30 20:39:31 -04:00
corenetwork.te.m4 Remove old aliases. 2019-09-30 20:02:43 -04:00
devices.fc Fix use of buggy pattern (.*)? 2019-08-29 19:57:05 +02:00
devices.if init: allow systemd to mount over /dev/kmsg and /proc/kmsg 2019-12-22 17:29:58 +01:00
devices.te various: Module version bump. 2019-12-26 11:48:27 -05:00
domain.fc
domain.if Add new mmap permission set and pattern support macros. 2017-12-13 18:58:34 -05:00
domain.te various: Module version bump. 2019-09-03 19:47:12 -04:00
files.fc Merge pull request from fishilico/fc-escape-single-dot 2019-08-31 06:24:06 -04:00
files.if files: introduce files_dontaudit_read_etc_files 2019-01-23 18:40:57 -05:00
files.te various: Module version bump. 2019-09-30 20:39:31 -04:00
filesystem.fc added bpf_t filesystem label 2019-12-16 20:16:14 +01:00
filesystem.if Fix indent to match the rest of the file (space -> tab) 2019-12-26 12:00:32 -05:00
filesystem.te various: Module version bump. 2019-12-26 12:21:07 -05:00
kernel.fc Add fc for /sys/kernel/debug as debugfs_t 2015-05-06 09:49:40 -04:00
kernel.if Label /sys/kernel/ns_last_pid as sysctl_kernel_ns_last_pid_t 2019-04-12 07:52:27 -04:00
kernel.te various: Module version bump. 2019-09-30 20:39:31 -04:00
mcs.fc
mcs.if remove trailing whitespaces 2016-12-06 13:45:13 +01:00
mcs.te
metadata.xml
mls.fc
mls.if Remove unused translate permission in context userspace class. 2018-10-13 13:39:18 -04:00
mls.te Bump module versions for release. 2019-02-01 15:03:42 -05:00
selinux.fc
selinux.if grant rpm_t permission to map security_t 2019-07-13 14:00:23 -04:00
selinux.te rpm, selinux, sysadm, init: Module version bump. 2019-07-13 14:07:11 -04:00
storage.fc devices, storage: Add fc entries for mtd char devices and ndctl devices. 2019-07-16 16:38:43 -04:00
storage.if storage: introduce storage_raw_read_fixed_disk_cond 2020-01-12 21:57:17 +01:00
storage.te devices, storage: Module version bump 2019-07-29 20:50:45 -04:00
terminal.fc Move use of user_devpts_t from terminal.fc to userdomain.fc 2018-04-12 18:44:50 -04:00
terminal.if terminal: Rename term_create_devpts. 2017-09-11 20:03:58 -04:00
terminal.te Bump module versions for release. 2018-07-01 11:02:33 -04:00
ubac.fc
ubac.if
ubac.te