fix tmp_domain
This commit is contained in:
parent
5f75f56066
commit
94edcc5c83
@ -211,6 +211,9 @@ allow update_modules_t modules_conf_t:file { create ioctl read getattr lock writ
|
||||
allow update_modules_t depmod_exec_t:file { getattr read execute };
|
||||
type_transition update_modules_t depmod_exec_t:process depmod_t;
|
||||
|
||||
allow update_modules_t update_modules_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };
|
||||
allow update_modules_t update_modules_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };
|
||||
|
||||
kernel_read_kernel_sysctl(update_modules_t)
|
||||
kernel_read_system_state(update_modules_t)
|
||||
|
||||
@ -224,6 +227,7 @@ terminal_use_controlling_terminal(update_modules_t)
|
||||
files_read_runtime_system_config(update_modules_t)
|
||||
files_read_general_system_config(update_modules_t)
|
||||
files_execute_system_config_script(update_modules_t)
|
||||
files_create_private_tmp_data(update_modules_t, update_modules_tmp_t, { file dir })
|
||||
|
||||
corecommands_execute_general_programs(update_modules_t)
|
||||
corecommands_execute_system_programs(update_modules_t)
|
||||
@ -252,5 +256,4 @@ allow update_modules_t lib_t:file { getattr read };
|
||||
|
||||
file_type_auto_trans(update_modules_t, etc_t, modules_conf_t, file)
|
||||
|
||||
tmp_domain(update_modules)
|
||||
') dnl endif TODO
|
||||
|
Loading…
Reference in New Issue
Block a user