nnd
/
selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #789 from yizhao1/update 

userdomain: allow administrative user to get attributes of shadow his…
This commit is contained in:
Chris PeBenito 2024-07-01 15:12:24 -04:00 committed by GitHub
parent 7c797909a2 5f7f494d19
commit 73c2c68ee7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/system/authlogin.if
View File

@ -745,6 +745,25 @@ interface(`auth_etc_filetrans_shadow',`
files_etc_filetrans($1, shadow_t, file, $2) files_etc_filetrans($1, shadow_t, file, $2)
') ')
########################################
## <summary>
## Get the attributes of the shadow history file.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`auth_getattr_shadow_history',`
gen_require(`
type shadow_history_t;
')
files_search_etc($1)
allow $1 shadow_history_t:file getattr;
')
######################################## ########################################
## <summary> ## <summary>
## Read the shadow history file. ## Read the shadow history file.

1
policy/modules/system/userdomain.if
View File

@ -1428,6 +1428,7 @@ template(`userdom_admin_user_template',`
term_use_all_terms($1_t) term_use_all_terms($1_t)
auth_getattr_shadow($1_t) auth_getattr_shadow($1_t)
auth_getattr_shadow_history($1_t)
# Manage almost all files # Manage almost all files
files_manage_non_auth_files($1_t) files_manage_non_auth_files($1_t)
files_map_non_auth_files($1_t) files_map_non_auth_files($1_t)