rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add ignore read system state

This commit is contained in:
Chris PeBenito 2005-05-02 18:42:33 +00:00
parent de2cee6817
commit 67484fced4
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
refpolicy/policy/modules/kernel/kernel.if
View File

@ -418,6 +418,20 @@ class lnk_file { getattr read };
class file { getattr read };
')
########################################
#
# kernel_ignore_read_system_state(domain)
#
define(`kernel_ignore_read_system_state',`
requires_block_template(kernel_ignore_read_system_state_depend)
allow $1 proc_t:file read;
')
ifdef(`kernel_ignore_read_system_state_depend',`
type proc_t;
class file read;
')
#######################################
#
# kernel_read_software_raid_state(domain,[`optional'])