rpms/selinux-policy
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Improve filesystem interfaces:

Browse Source 
fs_getattr_xattr_fs()
fs_getattr_all_fs()
fs_search_auto_mountpoints()
This commit is contained in:
Chris PeBenito 2010-03-01 14:50:55 -05:00
parent 42f1b11482
commit 12f73d8b69
1 changed files with 39 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
policy/modules/kernel/filesystem.if
View File

@ -169,15 +169,30 @@ interface(`fs_unmount_xattr_fs',`
######################################## ########################################
## <summary> ## <summary>
## Get the attributes of a persistent ## Get the attributes of persistent
## filesystem which has extended ## filesystems which have extended
## attributes, such as ext3, JFS, or XFS. ## attributes, such as ext3, JFS, or XFS.
## </summary> ## </summary>
## <desc>
## <p>
## Allow the specified domain to
## get the attributes of a persistent
## filesystems which have extended
## attributes, such as ext3, JFS, or XFS.
## Example attributes:
## </p>
## <ul>
## <li>Type of the file system (e.g., ext3)</li>
## <li>Size of the file system</li>
## <li>Available space on the file system</li>
## </ul>
## </desc>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
## Domain allowed access. ## Domain allowed access.
## </summary> ## </summary>
## </param> ## </param>
## <infoflow type="read" weight="5"/>
## <rolecap/> ## <rolecap/>
# #
interface(`fs_getattr_xattr_fs',` interface(`fs_getattr_xattr_fs',`
@ -407,11 +422,19 @@ interface(`fs_getattr_autofs',`
## Search automount filesystem to use automatically ## Search automount filesystem to use automatically
## mounted filesystems. ## mounted filesystems.
## </summary> ## </summary>
## <desc>
## Allow the specified domain to search mount points
## that have filesystems that are mounted by
## the automount service. Generally this will
## be required for any domain that accesses objects
## on these filesystems.
## </desc>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
## Domain allowed access. ## Domain allowed access.
## </summary> ## </summary>
## </param> ## </param>
## <infoflow type="read" weight="5"/>
# #
interface(`fs_search_auto_mountpoints',` interface(`fs_search_auto_mountpoints',`
gen_require(` gen_require(`
@ -3837,14 +3860,26 @@ interface(`fs_unmount_all_fs',`
######################################## ########################################
## <summary> ## <summary>
## Get the attributes of all persistent ## Get the attributes of all filesystems.
## filesystems.
## </summary> ## </summary>
## <desc>
## <p>
## Allow the specified domain to
## et the attributes of all filesystems.
## Example attributes:
## </p>
## <ul>
## <li>Type of the file system (e.g., ext3)</li>
## <li>Size of the file system</li>
## <li>Available space on the file system</li>
## </ul>
## </desc>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
## Domain allowed access. ## Domain allowed access.
## </summary> ## </summary>
## </param> ## </param>
## <infoflow type="read" weight="5"/>
## <rolecap/> ## <rolecap/>
# #
interface(`fs_getattr_all_fs',` interface(`fs_getattr_all_fs',`