add ignore read rootfs file
This commit is contained in:
parent
d0b6abebb9
commit
9f2f9e6dfe
@ -80,10 +80,10 @@ class chr_file relabelfrom;
|
|||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
# files_search_all_directories(type,[`optional'])
|
# files_search_all_directories(domain)
|
||||||
#
|
#
|
||||||
define(`files_search_all_directories',`
|
define(`files_search_all_directories',`
|
||||||
requires_block_template(files_search_all_directories_depend,$2)
|
requires_block_template(files_search_all_directories_depend)
|
||||||
allow $1 file_type:dir search;
|
allow $1 file_type:dir search;
|
||||||
')
|
')
|
||||||
|
|
||||||
@ -92,6 +92,20 @@ attribute file_type;
|
|||||||
class dir search;
|
class dir search;
|
||||||
')
|
')
|
||||||
|
|
||||||
|
########################################
|
||||||
|
#
|
||||||
|
# files_ignore_search_all_directories(domain)
|
||||||
|
#
|
||||||
|
define(`files_ignore_search_all_directories',`
|
||||||
|
requires_block_template(files_ignore_search_all_directories_depend)
|
||||||
|
dontaudit $1 file_type:dir search;
|
||||||
|
')
|
||||||
|
|
||||||
|
define(`files_ignore_search_all_directories_depend',`
|
||||||
|
attribute file_type;
|
||||||
|
class dir search;
|
||||||
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
# files_read_all_directories(type,[`optional'])
|
# files_read_all_directories(type,[`optional'])
|
||||||
@ -150,6 +164,20 @@ type root_t;
|
|||||||
class dir { getattr search read write add_name };
|
class dir { getattr search read write add_name };
|
||||||
')
|
')
|
||||||
|
|
||||||
|
########################################
|
||||||
|
#
|
||||||
|
# files_ignore_read_rootfs_file(domain)
|
||||||
|
#
|
||||||
|
define(`files_ignore_read_rootfs_file',`
|
||||||
|
requires_block_template(files_ignore_read_rootfs_file_depend)
|
||||||
|
dontaudit $1 root_t:file read;
|
||||||
|
')
|
||||||
|
|
||||||
|
define(`files_ignore_read_rootfs_file_depend',`
|
||||||
|
type root_t;
|
||||||
|
class file read;
|
||||||
|
')
|
||||||
|
|
||||||
########################################
|
########################################
|
||||||
#
|
#
|
||||||
# files_ignore_modify_rootfs_file(domain,[`optional'])
|
# files_ignore_modify_rootfs_file(domain,[`optional'])
|
||||||
|
Loading…
Reference in New Issue
Block a user