mirror of
https://github.com/SELinuxProject/selinux
synced 2025-04-08 10:41:17 +00:00
sepolgen: refparser: include open among valid permissions
The perser doesn't recognize 'open'. Make it so. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>
This commit is contained in:
parent
de311acdc9
commit
3f1446944e
@ -1045,7 +1045,7 @@ def parse_headers(root, output=None, expand=True, debug=False):
|
|||||||
# of misc_macros. We are just going to pretend that this is an interface
|
# of misc_macros. We are just going to pretend that this is an interface
|
||||||
# to make the expansion work correctly.
|
# to make the expansion work correctly.
|
||||||
can_exec = refpolicy.Interface("can_exec")
|
can_exec = refpolicy.Interface("can_exec")
|
||||||
av = access.AccessVector(["$1","$2","file","execute_no_trans","read",
|
av = access.AccessVector(["$1","$2","file","execute_no_trans","open", "read",
|
||||||
"getattr","lock","execute","ioctl"])
|
"getattr","lock","execute","ioctl"])
|
||||||
|
|
||||||
can_exec.children.append(refpolicy.AVRule(av))
|
can_exec.children.append(refpolicy.AVRule(av))
|
||||||
|
Loading…
Reference in New Issue
Block a user