diff options
| author |   Russell Coker <russell@coker.com.au> | 2023-09-22 00:22:36 +1000 |
|---|---|---|
| committer |   Kenton Groombridge <concord@gentoo.org> | 2023-10-06 11:27:06 -0400 |
| commit | 345902025b3c03467a48c8b1474cbd3b3bc085cf (patch) | |
| tree | 8f1efde2ee1784251ff8befe09a49c83042b0ab6 /policy/modules/kernel/filesystem.if | |
| parent | debian motd.d directory (#689) (diff) | |
| download | hardened-refpolicy-345902025b3c03467a48c8b1474cbd3b3bc085cf.tar.gz hardened-refpolicy-345902025b3c03467a48c8b1474cbd3b3bc085cf.tar.bz2 hardened-refpolicy-345902025b3c03467a48c8b1474cbd3b3bc085cf.zip | |
policy for the Reliability Availability servicability daemon (#690)
* policy for the Reliability Availability servicability daemon
Signed-off-by: Russell Coker <russell@coker.com.au>
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
Diffstat (limited to 'policy/modules/kernel/filesystem.if')
| -rw-r--r-- | policy/modules/kernel/filesystem.if | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/policy/modules/kernel/filesystem.if b/policy/modules/kernel/filesystem.if index 5cdbc564..5213df5b 100644 --- a/policy/modules/kernel/filesystem.if +++ b/policy/modules/kernel/filesystem.if @@ -6156,6 +6156,43 @@ interface(`fs_getattr_tracefs_files',` ######################################## ## <summary> +## Read/write trace filesystem files +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`fs_rw_tracefs_files',` + gen_require(` + type tracefs_t; + ') + + allow $1 tracefs_t:dir list_dir_perms; + allow $1 tracefs_t:file rw_file_perms; +') + +######################################## +## <summary> +## create trace filesystem directories +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`fs_create_tracefs_dirs',` + gen_require(` + type tracefs_t; + ') + + allow $1 tracefs_t:dir { create rw_dir_perms }; +') + +######################################## +## <summary> ## Mount a XENFS filesystem. ## </summary> ## <param name="domain"> |