diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if index 3baa04146..ffc83d505 100644 --- a/policy/modules/kernel/files.if +++ b/policy/modules/kernel/files.if @@ -5212,6 +5212,24 @@ interface(`files_usr_filetrans',` filetrans_pattern($1, usr_t, $2, $3, $4) ') +######################################## +## +## Search directories in /usr/src. +## +## +## +## Domain allowed access. +## +## +# +interface(`files_search_src',` + gen_require(` + type src_t; + ') + + allow $1 src_t:dir search_dir_perms; +') + ######################################## ## ## Do not audit attempts to search /usr/src.