add proc_net lnk
This commit is contained in:
parent
b4e1ebc1f0
commit
7ebd6a9079
@ -751,13 +751,12 @@ interface(`kernel_search_network_state',`
|
|||||||
interface(`kernel_read_network_state',`
|
interface(`kernel_read_network_state',`
|
||||||
gen_require(`
|
gen_require(`
|
||||||
type proc_t, proc_net_t;
|
type proc_t, proc_net_t;
|
||||||
class dir r_dir_perms;
|
|
||||||
class file r_file_perms;
|
|
||||||
')
|
')
|
||||||
|
|
||||||
allow $1 proc_t:dir search;
|
allow $1 proc_t:dir search;
|
||||||
allow $1 proc_net_t:dir r_dir_perms;
|
allow $1 proc_net_t:dir r_dir_perms;
|
||||||
allow $1 proc_net_t:file r_file_perms;
|
allow $1 proc_net_t:file r_file_perms;
|
||||||
|
allow $1 proc_net_t:lnk_file { getattr read };
|
||||||
')
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
|
Loading…
Reference in New Issue
Block a user