trunk: Add kernel_service access vectors, from Stephen Smalley.

2009-01-05 21:44:33 +00:00 · 2009-01-05 21:44:33 +00:00 · 347a701119
commit 347a701119
parent e66a0cad18
3 changed files with 11 additions and 0 deletions
--- a/2
+++ b/2
@ -1,3 +1,5 @@
+- Add kernel_service access vectors, from Stephen Smalley.
+
 * Wed Dec 10 2008 Chris PeBenito <selinux@tresys.com> - 2.20081210
 - Fix consistency of audioentropy and iscsi module naming.
 - Debian file context fix for xen from Russell Coker.
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@ -782,3 +782,9 @@ class x_application_data
 	paste_after_confirm
 	copy
 }
+
+class kernel_service
+{
+	use_as_override
+	create_files_as	
+}
--- a/policy/flask/security_classes
+++ b/policy/flask/security_classes
@ -116,4 +116,7 @@ class x_event			# userspace
 class x_synthetic_event		# userspace
 class x_application_data	# userspace

+# kernel services that need to override task security, e.g. cachefiles
+class kernel_service 
+
 # FLASK