nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add interface to allow reading files in efivarfs - contains Linux Kernel configuration options for UEFI systems (UEFI Runtime Variables)

Browse Source
This commit is contained in:
Vit Mojzis 2015-10-01 10:20:01 +02:00 committed by Laurent Bigonville
parent 498df2c5b9
commit 17bd45dab9
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
policy/modules/kernel/filesystem.if
View File

@ -1846,6 +1846,26 @@ interface(`fs_manage_dos_files',`
manage_files_pattern($1, dosfs_t, dosfs_t)
')
#######################################
## <summary>
## Read files in efivarfs
## - contains Linux Kernel configuration options for UEFI systems
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`fs_read_efivarfs_files',`
gen_require(`
type efivarfs_t;
')
read_files_pattern($1, efivarfs_t, efivarfs_t)
')
########################################
## <summary>
## Read eventpollfs files.