rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

split dev_create_cardmgr_dev() into a create and a filetrans interface.

Browse Source
This commit is contained in:
Chris PeBenito 2009-08-25 09:56:56 -04:00
parent dbb7dd9484
commit e27827b86c
3 changed files with 27 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
policy/modules/kernel/devices.if
View File

@ -1208,6 +1208,27 @@ interface(`dev_dontaudit_rw_cardmgr',`
dontaudit $1 cardmgr_dev_t:chr_file { read write }; dontaudit $1 cardmgr_dev_t:chr_file { read write };
') ')
########################################
## <summary>
## Create, read, write, and delete
## the PCMCIA card manager device
## with the correct type.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`dev_create_cardmgr_dev',`
gen_require(`
type device_t, cardmgr_dev_t;
')
create_chr_files_pattern($1, device_t, cardmgr_dev_t)
create_blk_files_pattern($1, device_t, cardmgr_dev_t)
')
######################################## ########################################
## <summary> ## <summary>
## Create, read, write, and delete ## Create, read, write, and delete
@ -1230,9 +1251,9 @@ interface(`dev_manage_cardmgr_dev',`
######################################## ########################################
## <summary> ## <summary>
## Create, read, write, and delete ## Automatic type transition to the type
## the PCMCIA card manager device ## for PCMCIA card manager device nodes when
## with the correct type. ## created in /dev.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -1240,13 +1261,11 @@ interface(`dev_manage_cardmgr_dev',`
## </summary> ## </summary>
## </param> ## </param>
# #
interface(`dev_create_cardmgr_dev',` interface(`dev_filetrans_cardmgr',`
gen_require(` gen_require(`
type device_t, cardmgr_dev_t; type device_t, cardmgr_dev_t;
') ')
create_chr_files_pattern($1, device_t, cardmgr_dev_t)
create_blk_files_pattern($1, device_t, cardmgr_dev_t)
filetrans_pattern($1, device_t, cardmgr_dev_t, { chr_file blk_file }) filetrans_pattern($1, device_t, cardmgr_dev_t, { chr_file blk_file })
') ')

2
policy/modules/kernel/devices.te
View File

@ -1,5 +1,5 @@
policy_module(devices, 1.8.1) policy_module(devices, 1.8.2)
######################################## ########################################
# #

2
policy/modules/system/pcmcia.te
View File

@ -55,7 +55,7 @@ corecmd_exec_all_executables(cardmgr_t)
dev_read_sysfs(cardmgr_t) dev_read_sysfs(cardmgr_t)
dev_manage_cardmgr_dev(cardmgr_t) dev_manage_cardmgr_dev(cardmgr_t)
dev_create_cardmgr_dev(cardmgr_t) dev_filetrans_cardmgr(cardmgr_t)
dev_getattr_all_chr_files(cardmgr_t) dev_getattr_all_chr_files(cardmgr_t)
dev_getattr_all_blk_files(cardmgr_t) dev_getattr_all_blk_files(cardmgr_t)
# for SSP # for SSP