From d504e1ef1be68082e8f5a5652d731633f1170110 Mon Sep 17 00:00:00 2001 From: Russell Coker Date: Thu, 23 Feb 2017 15:14:16 +1100 Subject: [PATCH] rw_inherited_file_perms This patch defines rw_inherited_file_perms. It's needed by a few patches I'm going to send soon so I need to get it in before they go in. Also it's generally a good thing to have. We should reconsider some of the other policy for whether it should use this. --- policy/support/obj_perm_sets.spt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/policy/support/obj_perm_sets.spt b/policy/support/obj_perm_sets.spt index 0fdb98b7d..590ea6394 100644 --- a/policy/support/obj_perm_sets.spt +++ b/policy/support/obj_perm_sets.spt @@ -158,7 +158,8 @@ define(`mmap_file_perms',`{ getattr open read execute ioctl }') define(`exec_file_perms',`{ getattr open read execute ioctl execute_no_trans }') define(`append_file_perms',`{ getattr open append lock ioctl }') define(`write_file_perms',`{ getattr open write append lock ioctl }') -define(`rw_file_perms',`{ getattr open read write append ioctl lock }') +define(`rw_inherited_file_perms',`{ getattr read write append ioctl lock }') +define(`rw_file_perms',`{ open rw_inherited_file_perms }') define(`create_file_perms',`{ getattr create open }') define(`rename_file_perms',`{ getattr rename }') define(`delete_file_perms',`{ getattr unlink }')