rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: fix bad cifs interface.

Browse Source
This commit is contained in:
Chris PeBenito 2008-05-23 14:41:36 +00:00
parent e6fdb59601
commit 7d8fbdc062
2 changed files with 1 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/kernel/filesystem.if
View File

@ -776,25 +776,6 @@ interface(`fs_read_noxattr_fs_symlinks',`
read_lnk_files_pattern($1,noxattrfs,noxattrfs) read_lnk_files_pattern($1,noxattrfs,noxattrfs)
') ')
########################################
## <summary>
## Do not audit attempts to read
## dirs on a CIFS or SMB filesystem.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`fs_dontaudit_list_cifs_dirs',`
gen_require(`
type cifs_t;
')
dontaudit $1 cifs_t:dir list_dir_perms;
')
######################################## ########################################
## <summary> ## <summary>
## Do not audit attempts to read ## Do not audit attempts to read

2
policy/modules/system/userdomain.if
View File

@ -202,7 +202,7 @@ template(`userdom_ro_home_template',`
fs_read_cifs_named_sockets($1_t) fs_read_cifs_named_sockets($1_t)
fs_read_cifs_named_pipes($1_t) fs_read_cifs_named_pipes($1_t)
',` ',`
fs_dontaudit_list_cifs_dirs($1_t) fs_dontaudit_list_cifs($1_t)
fs_dontaudit_read_cifs_files($1_t) fs_dontaudit_read_cifs_files($1_t)
') ')
') ')