semodule needs to manage the file contexts
This commit is contained in:
parent
9779f09284
commit
55b190552b
@ -702,6 +702,27 @@ interface(`seutil_rw_file_contexts',`
|
|||||||
allow $1 file_context_t:lnk_file { getattr read };
|
allow $1 file_context_t:lnk_file { getattr read };
|
||||||
')
|
')
|
||||||
|
|
||||||
|
########################################
|
||||||
|
## <summary>
|
||||||
|
## Create, read, write, and delete the file_contexts files.
|
||||||
|
## </summary>
|
||||||
|
## <param name="domain">
|
||||||
|
## <summary>
|
||||||
|
## Domain allowed access.
|
||||||
|
## </summary>
|
||||||
|
## </param>
|
||||||
|
#
|
||||||
|
interface(`seutil_manage_file_contexts',`
|
||||||
|
gen_require(`
|
||||||
|
type selinux_config_t, file_context_t;
|
||||||
|
')
|
||||||
|
|
||||||
|
files_search_etc($1)
|
||||||
|
allow $1 selinux_config_t:dir search_dir_perms;
|
||||||
|
allow $1 file_context_t:dir rw_dir_perms;
|
||||||
|
allow $1 file_context_t:file manage_file_perms;
|
||||||
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
# seutil_read_bin_policy(domain)
|
# seutil_read_bin_policy(domain)
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
|
|
||||||
policy_module(selinuxutil,1.2.1)
|
policy_module(selinuxutil,1.2.2)
|
||||||
|
|
||||||
gen_require(`
|
gen_require(`
|
||||||
bool secure_mode;
|
bool secure_mode;
|
||||||
@ -518,7 +518,7 @@ libs_use_shared_libs(semanage_t)
|
|||||||
libs_use_lib_files(semanage_t)
|
libs_use_lib_files(semanage_t)
|
||||||
|
|
||||||
seutil_search_default_contexts(semanage_t)
|
seutil_search_default_contexts(semanage_t)
|
||||||
seutil_rw_file_contexts(semanage_t)
|
seutil_manage_file_contexts(semanage_t)
|
||||||
seutil_manage_selinux_config(semanage_t)
|
seutil_manage_selinux_config(semanage_t)
|
||||||
seutil_domtrans_setfiles(semanage_t)
|
seutil_domtrans_setfiles(semanage_t)
|
||||||
seutil_domtrans_loadpolicy(semanage_t)
|
seutil_domtrans_loadpolicy(semanage_t)
|
||||||
|
Loading…
Reference in New Issue
Block a user