fix dontaudit interface that was allowing instead of dontauditing; thanks to karl for pointing this out.

This commit is contained in:
Chris PeBenito 2006-11-28 15:57:22 +00:00
parent c31f6724c0
commit bff907113d
4 changed files with 20 additions and 24 deletions

View File

@ -181,6 +181,24 @@ interface(`dev_relabel_generic_dev_dirs',`
allow $1 device_t:dir { r_dir_perms relabelfrom relabelto }; allow $1 device_t:dir { r_dir_perms relabelfrom relabelto };
') ')
########################################
## <summary>
## dontaudit getattr generic files in /dev.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`dev_dontaudit_getattr_generic_files',`
gen_require(`
type device_t;
')
dontaudit $1 device_t:file getattr;
')
######################################## ########################################
## <summary> ## <summary>
## Read and write generic files in /dev. ## Read and write generic files in /dev.
@ -3230,23 +3248,3 @@ interface(`dev_unconfined',`
typeattribute $1 devices_unconfined_type; typeattribute $1 devices_unconfined_type;
') ')
########################################
## <summary>
## dontaudit getattr generic files in /dev.
## </summary>
## <param name="domain">
## <summary>
## Domain to not audit.
## </summary>
## </param>
#
interface(`dev_dontaudit_getattr_generic_files',`
gen_require(`
type device_t;
')
allow $1 device_t:dir search;
dontaudit $1 device_t:file getattr;
')

View File

@ -1,5 +1,5 @@
policy_module(devices,1.2.2) policy_module(devices,1.2.3)
######################################## ########################################
# #

View File

@ -636,8 +636,6 @@ interface(`term_dontaudit_getattr_all_user_ptys',`
attribute ptynode; attribute ptynode;
') ')
dev_list_all_dev_nodes($1)
allow $1 devpts_t:dir r_dir_perms;
dontaudit $1 ptynode:chr_file getattr; dontaudit $1 ptynode:chr_file getattr;
') ')

View File

@ -1,5 +1,5 @@
policy_module(terminal,1.2.1) policy_module(terminal,1.2.2)
######################################## ########################################
# #