diff --git a/policy/modules/system/udev.if b/policy/modules/system/udev.if index 77a13a5b7..9ccfd8a64 100644 --- a/policy/modules/system/udev.if +++ b/policy/modules/system/udev.if @@ -222,6 +222,25 @@ interface(`udev_rw_db',` allow $1 udev_tbl_t:file rw_file_perms; ') +######################################## +## +## Read udev pid files. +## +## +## +## Domain allowed access. +## +## +# +interface(`udev_read_pid_files',` + gen_require(` + type udev_var_run_t; + ') + + files_search_pids($1) + read_files_pattern($1, udev_var_run_t, udev_var_run_t) +') + ######################################## ## ## Search through udev pid content