diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if index c3c68802f..b4803770e 100644 --- a/policy/modules/kernel/files.if +++ b/policy/modules/kernel/files.if @@ -4838,6 +4838,25 @@ interface(`files_getattr_usr_files',` getattr_files_pattern($1, usr_t, usr_t) ') +######################################## +## +## Map generic files in /usr. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`files_map_usr_files',` + gen_require(` + type usr_t; + ') + + allow $1 usr_t:file map; +') + ######################################## ## ## Read generic files in /usr.