rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add xml

Browse Source
This commit is contained in:
Chris PeBenito 2005-05-18 21:00:00 +00:00
parent 494e988f80
commit 2e77b29e67
1 changed files with 25 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
refpolicy/policy/modules/system/files.if
View File

@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC # Copyright (C) 2005 Tresys Technology, LLC
## <module name="files" layer="system">
## <summary>Policy controlling access to general files</summary>
######################################## ########################################
# #
@ -73,7 +75,7 @@ attribute tmpfile;
######################################## ########################################
# #
# files_get_all_file_attributes(type) # files_get_all_file_attributes(domain)
# #
define(`files_get_all_file_attributes',` define(`files_get_all_file_attributes',`
requires_block_template(`$0'_depend) requires_block_template(`$0'_depend)
@ -163,7 +165,7 @@ class dir search;
######################################## ########################################
# #
# files_read_all_directories(type) # files_read_all_directories(domain)
# #
define(`files_read_all_directories',` define(`files_read_all_directories',`
requires_block_template(`$0'_depend) requires_block_template(`$0'_depend)
@ -177,7 +179,7 @@ class dir { getattr search read };
######################################## ########################################
# #
# files_mount_on_all_mountpoints(type) # files_mount_on_all_mountpoints(domain)
# #
define(`files_mount_on_all_mountpoints',` define(`files_mount_on_all_mountpoints',`
requires_block_template(`$0'_depend) requires_block_template(`$0'_depend)
@ -261,10 +263,26 @@ type root_t;
class chr_file { read write }; class chr_file { read write };
') ')
########################################
# #
# files_create_private_root_dir_entry(domain,privatetype,[class(es)]) ## <interface name="files_create_private_root_dir_entry">
## <description>
## Create an object in the root directory, with a private
## type. If no object class is specified, the
## default is file.
## </description>
## <parameter name="domain">
## The type of the process performing this action.
## </parameter>
## <parameter name="private type">
## The type of the object to be created.
## </parameter>
## <parameter name="object" optional="true">
## The type of the process performing this action.
## </parameter>
## <infoflow type="write" weight="10"/>
## </interface>
# #
define(`files_create_private_root_dir_entry',` define(`files_create_private_root_dir_entry',`
requires_block_template(`$0'_depend) requires_block_template(`$0'_depend)
allow $1 root_t:dir { getattr search read write add_name remove_name }; allow $1 root_t:dir { getattr search read write add_name remove_name };
@ -799,3 +817,5 @@ define(`files_read_system_spool_directory_depend',`
type var_t, var_spool_t; type var_t, var_spool_t;
class dir { getattr search read }; class dir { getattr search read };
') ')
## </module>