From 1cbe9e6196434bd151f8b8f8529c6e558d0757bf Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sun, 21 Oct 2012 14:20:11 +0200 Subject: [PATCH] For svirt_lxc_domain Signed-off-by: Dominick Grift --- policy/modules/system/udev.if | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/policy/modules/system/udev.if b/policy/modules/system/udev.if index 77a13a5b7..9ccfd8a64 100644 --- a/policy/modules/system/udev.if +++ b/policy/modules/system/udev.if @@ -222,6 +222,25 @@ interface(`udev_rw_db',` allow $1 udev_tbl_t:file rw_file_perms; ') +######################################## +## +## Read udev pid files. +## +## +## +## Domain allowed access. +## +## +# +interface(`udev_read_pid_files',` + gen_require(` + type udev_var_run_t; + ') + + files_search_pids($1) + read_files_pattern($1, udev_var_run_t, udev_var_run_t) +') + ######################################## ## ## Search through udev pid content