nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add mounting interfaces for selinuxfs.

This commit is contained in:
Chris PeBenito 2010-10-28 14:32:16 -04:00
parent c1229a8232
commit 220915dcad
2 changed files with 56 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

55
policy/modules/kernel/selinux.if
View File

@ -94,6 +94,61 @@ interface(`selinux_dontaudit_get_fs_mount',`
kernel_dontaudit_read_system_state($1)
')
########################################
## <summary>
## Mount the selinuxfs filesystem.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`selinux_mount_fs',`
gen_require(`
type security_t;
')
allow $1 security_t:filesystem mount;
')
########################################
## <summary>
## Remount the selinuxfs filesystem.
## This allows some mount options to be changed.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`selinux_remount_fs',`
gen_require(`
type security_t;
')
allow $1 security_t:filesystem remount;
')
########################################
## <summary>
## Unmount the selinuxfs filesystem.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`selinux_unmount_fs',`
gen_require(`
type security_t;
')
allow $1 security_t:filesystem unmount;
')
########################################
## <summary>
## Get the attributes of the selinuxfs filesystem

2
policy/modules/kernel/selinux.te
View File

@ -1,4 +1,4 @@
policy_module(selinux, 1.8.0)
policy_module(selinux, 1.8.1)
########################################
#