rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

semodule needs to manage the file contexts

Browse Source
This commit is contained in:
Chris PeBenito 2006-03-29 19:18:00 +00:00
parent 9779f09284
commit 55b190552b
2 changed files with 23 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
refpolicy/policy/modules/system/selinuxutil.if
View File

@ -702,6 +702,27 @@ interface(`seutil_rw_file_contexts',`
allow $1 file_context_t:lnk_file { getattr read };
')
########################################
## <summary>
## Create, read, write, and delete the file_contexts files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`seutil_manage_file_contexts',`
gen_require(`
type selinux_config_t, file_context_t;
')
files_search_etc($1)
allow $1 selinux_config_t:dir search_dir_perms;
allow $1 file_context_t:dir rw_dir_perms;
allow $1 file_context_t:file manage_file_perms;
')
########################################
#
# seutil_read_bin_policy(domain)

4
refpolicy/policy/modules/system/selinuxutil.te
View File

@ -1,5 +1,5 @@
policy_module(selinuxutil,1.2.1)
policy_module(selinuxutil,1.2.2)
gen_require(`
bool secure_mode;
@ -518,7 +518,7 @@ libs_use_shared_libs(semanage_t)
libs_use_lib_files(semanage_t)
seutil_search_default_contexts(semanage_t)
seutil_rw_file_contexts(semanage_t)
seutil_manage_file_contexts(semanage_t)
seutil_manage_selinux_config(semanage_t)
seutil_domtrans_setfiles(semanage_t)
seutil_domtrans_loadpolicy(semanage_t)