nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adding dontaudit interfaces for files module

Browse Source 
Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
This commit is contained in:
Sven Vermeulen 2012-03-22 21:06:57 +01:00 committed by Chris PeBenito
parent fbb165b989
commit f93d4fd85c
1 changed files with 36 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
policy/modules/kernel/files.if
View File

@ -1480,6 +1480,42 @@ interface(`files_dontaudit_list_all_mountpoints',`
dontaudit $1 mountpoint:dir list_dir_perms;
')
########################################
## <summary>
## Do not audit write attempts on mount points.
## </summary>
## <param name="domain">
## <summary>
## Domain to ignore write attempts from
## </summary>
## </param>
#
interface(`files_dontaudit_write_all_mountpoints',`
gen_require(`
attribute mountpoint;
')
dontaudit $1 mountpoint:dir write;
')
########################################
## <summary>
## Do not audit setattr attempts on mount points.
## </summary>
## <param name="domain">
## <summary>
## Domain to ignore setattr attempts from
## </summary>
## </param>
#
interface(`files_dontaudit_setattr_all_mountpoints',`
gen_require(`
attribute mountpoint;
')
dontaudit $1 mountpoint:dir setattr;
')
########################################
## <summary>
## List the contents of the root directory.