rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

fix miscfiles_read_localization()

Browse Source
This commit is contained in:
Chris PeBenito 2006-09-13 18:08:17 +00:00
parent 0d96ff339e
commit 2cac32a605
4 changed files with 22 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/kernel/files.if
View File

@ -1903,6 +1903,25 @@ interface(`files_relabel_etc_files',`
allow $1 etc_t:file { relabelfrom relabelto }; allow $1 etc_t:file { relabelfrom relabelto };
') ')
########################################
## <summary>
## Read symbolic links in /etc.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`files_read_etc_symlinks',`
gen_require(`
type etc_t;
')
allow $1 etc_t:dir search_dir_perms;
allow $1 etc_t:lnk_file { getattr read };
')
######################################## ########################################
## <summary> ## <summary>
## Create objects in /etc with a private ## Create objects in /etc with a private

2
policy/modules/kernel/files.te
View File

@ -1,5 +1,5 @@
policy_module(files,1.2.15) policy_module(files,1.2.16)
######################################## ########################################
# #

3
policy/modules/system/miscfiles.if
View File

@ -106,8 +106,7 @@ interface(`miscfiles_read_localization',`
type locale_t; type locale_t;
') ')
files_search_etc($1) files_read_etc_symlinks($1)
# FIXME: $1 read etc_t:lnk_file here
files_search_usr($1) files_search_usr($1)
allow $1 locale_t:dir r_dir_perms; allow $1 locale_t:dir r_dir_perms;
allow $1 locale_t:lnk_file r_file_perms; allow $1 locale_t:lnk_file r_file_perms;

2
policy/modules/system/miscfiles.te
View File

@ -1,5 +1,5 @@
policy_module(miscfiles,1.0.4) policy_module(miscfiles,1.0.5)
######################################## ########################################
# #