nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

selinuxutil: Add map permissions neccessary for semanage

Browse Source
This commit is contained in:
Luis Ressel 2017-09-11 08:40:53 +02:00 committed by Chris PeBenito
parent c695860748
commit bbab9e970d
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/system/selinuxutil.if
View File

@ -1043,6 +1043,7 @@ interface(`seutil_read_module_store',`
list_dirs_pattern($1, selinux_config_t, semanage_store_t)
list_dirs_pattern($1, semanage_store_t, semanage_store_t)
read_files_pattern($1, semanage_store_t, semanage_store_t)
allow $1 semanage_store_t:file map;
read_lnk_files_pattern($1, semanage_store_t, semanage_store_t)
')
@ -1067,6 +1068,7 @@ interface(`seutil_manage_module_store',`
manage_dirs_pattern($1, selinux_config_t, semanage_store_t)
manage_dirs_pattern($1, semanage_store_t, semanage_store_t)
manage_files_pattern($1, semanage_store_t, semanage_store_t)
allow $1 semanage_store_t:file map;
manage_lnk_files_pattern($1, semanage_store_t, semanage_store_t)
')

3
policy/modules/system/selinuxutil.te
View File

@ -500,6 +500,7 @@ domain_use_interactive_fds(semanage_t)
files_read_etc_files(semanage_t)
files_read_etc_runtime_files(semanage_t)
files_map_usr_files(semanage_t)
files_read_usr_files(semanage_t)
files_list_pids(semanage_t)
@ -536,7 +537,9 @@ seutil_manage_default_contexts(semanage_t)
# Handle pp files created in homedir and /tmp
userdom_read_user_home_content_files(semanage_t)
userdom_map_user_home_content_files(semanage_t)
userdom_read_user_tmp_files(semanage_t)
userdom_map_user_tmp_files(semanage_t)
ifdef(`distro_debian',`
files_read_var_lib_files(semanage_t)