nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

systemd: Move interface implementation.

Browse Source
This commit is contained in:
Chris PeBenito 2019-01-20 16:36:36 -05:00
parent 6cbaf3240e
commit ecb4968238
1 changed files with 19 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
policy/modules/system/systemd.if
View File

@ -389,6 +389,25 @@ interface(`systemd_manage_all_units',`
manage_lnk_files_pattern($1, systemdunit, systemdunit)
')
########################################
## <summary>
## Allow domain to read systemd_journal_t files
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`systemd_read_journal_files',`
gen_require(`
type systemd_journal_t;
')
list_dirs_pattern($1, systemd_journal_t, systemd_journal_t)
mmap_read_files_pattern($1, systemd_journal_t, systemd_journal_t)
')
########################################
## <summary>
## Allow domain to create/manage systemd_journal_t files
@ -409,25 +428,6 @@ interface(`systemd_manage_journal_files',`
allow $1 systemd_journal_t:file map;
')
########################################
## <summary>
## Allow domain to read systemd_journal_t files
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`systemd_read_journal_files',`
gen_require(`
type systemd_journal_t;
')
list_dirs_pattern($1, systemd_journal_t, systemd_journal_t)
mmap_read_files_pattern($1, systemd_journal_t, systemd_journal_t)
')
########################################
## <summary>
## Relabel to systemd-journald directory type.