nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Introduce kernel_delete_unlabeled_chr_files

Browse Source 
The kernel_delete_unlabeled_chr_files interface is called by the
(deprecated) files_delete_isid_type_chr_files interface in
kernel/files.if.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2014-08-08 14:33:22 +02:00 committed by Chris PeBenito
parent f21915b7ca
commit 953a007662
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/kernel/kernel.if
View File

@ -2740,6 +2740,25 @@ interface(`kernel_dontaudit_write_unlabeled_chr_files',`
dontaudit $1 unlabeled_t:file write;
')
########################################
## <summary>
## Delete unlabeled character device nodes.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`kernel_delete_unlabeled_chr_files',`
gen_require(`
type unlabeled_t;
')
delete_chr_files_pattern($1, unlabeled_t, unlabeled_t)
')
########################################
## <summary>
## Create, read, write, and delete unlabeled character device nodes.