From f4a0be2dfc0c286b1a32002bb089ac913e05597d Mon Sep 17 00:00:00 2001 From: Dominick Grift Date: Sun, 21 Oct 2012 14:20:16 +0200 Subject: [PATCH] For virtd_lxc Signed-off-by: Dominick Grift --- policy/modules/kernel/filesystem.if | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/policy/modules/kernel/filesystem.if b/policy/modules/kernel/filesystem.if index 746347372..8416beb43 100644 --- a/policy/modules/kernel/filesystem.if +++ b/policy/modules/kernel/filesystem.if @@ -3906,6 +3906,24 @@ interface(`fs_dontaudit_getattr_tmpfs_dirs',` dontaudit $1 tmpfs_t:dir getattr; ') +######################################## +## +## Mount on tmpfs directories. +## +## +## +## Domain allowed access. +## +## +# +interface(`fs_mounton_tmpfs',` + gen_require(` + type tmpfs_t; + ') + + allow $1 tmpfs_t:dir mounton; +') + ######################################## ## ## Set the attributes of tmpfs directories.