From e3fd778b8fa8d2fa5941a6c83a38ee81d7e6001f Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Thu, 9 Jun 2005 23:06:07 +0000 Subject: [PATCH] add can_exec --- refpolicy/policy/support/misc_macros.spt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/refpolicy/policy/support/misc_macros.spt b/refpolicy/policy/support/misc_macros.spt index 37f25d93..148e5459 100644 --- a/refpolicy/policy/support/misc_macros.spt +++ b/refpolicy/policy/support/misc_macros.spt @@ -18,3 +18,5 @@ define(`shiftn',`ifelse($1,0,`shift($*)',`shiftn(decr($1),shift(shift($*)))')') # Optionally put the sensitivity for the file # define(`context_template',`ifdef(`enable_mls',`$1:$2',`$1')') dnl + +define(`can_exec',`allow $1 $2:file { getattr read execute execute_no_trans };')