aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLuis Ressel via refpolicy <refpolicy@oss.tresys.com>2017-10-25 01:46:43 +0200
committerJason Zaman <jason@perfinion.com>2017-10-29 20:59:50 +0800
commitd46e984bba90f703233e36a3c77926f0e4711859 (patch)
tree4f25c0eadfbde468559d5d4c6fd85ac680cde98e
parentfc_sort: use calloc instead of malloc (diff)
downloadhardened-refpolicy-d46e984b.tar.gz
hardened-refpolicy-d46e984b.tar.bz2
hardened-refpolicy-d46e984b.zip
kernel/files.if: files_list_kernel_modules should grant read perms for symlinks
files_search_kernel_modules also grant this; there's a couple of symlinks in /lib/modules/.
-rw-r--r--policy/modules/kernel/files.if1
1 files changed, 1 insertions, 0 deletions
diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index a95570790..05ca46a78 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -3966,6 +3966,7 @@ interface(`files_list_kernel_modules',`
')
allow $1 modules_object_t:dir list_dir_perms;
+ read_lnk_files_pattern($1, modules_object_t, modules_object_t)
')
########################################