diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if index 566314fe4..692db4593 100644 --- a/policy/modules/kernel/files.if +++ b/policy/modules/kernel/files.if @@ -5179,6 +5179,25 @@ interface(`files_list_var',` allow $1 var_t:dir list_dir_perms; ') +######################################## +## +## Do not audit attempts to list +## the contents of /var. +## +## +## +## Domain to not audit. +## +## +# +interface(`files_dontaudit_list_var',` + gen_require(` + type var_t; + ') + + dontaudit $1 var_t:dir list_dir_perms; +') + ######################################## ## ## Create, read, write, and delete directories