nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

For svirt_lxc_domain 

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
This commit is contained in:
Dominick Grift 2012-10-21 14:20:13 +02:00 committed by Chris PeBenito
parent c40ea7bd2d
commit 193760f130
1 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
policy/modules/kernel/files.if
View File

@ -2913,7 +2913,7 @@ interface(`files_delete_boot_flag',`
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## Domain to not audit.
## </summary>
## </param>
#
@ -2925,6 +2925,25 @@ interface(`files_dontaudit_setattr_etc_runtime_files',`
dontaudit $1 etc_runtime_t:file setattr;
')
########################################
## <summary>
## Do not audit attempts to write
## etc runtime files.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`files_dontaudit_write_etc_runtime_files',`
gen_require(`
type etc_runtime_t;
')
dontaudit $1 etc_runtime_t:file write;
')
########################################
## <summary>
## Read files in /etc that are dynamically