diff options
| author |   Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-07-04 22:14:58 +0200 |
|---|---|---|
| committer | Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-07-04 22:14:58 +0200 |
| commit | 895d3c5721bc3ae5df2c1db5ba28aaa4dc09ee88 (patch) | |
| tree | b2b4a2f941f91ee6f026b0f5e40cf02a58fbf826 /policy/modules/system/udev.if | |
| parent | Some more backports (diff) | |
| download | hardened-refpolicy-895d3c5721bc3ae5df2c1db5ba28aaa4dc09ee88.tar.gz hardened-refpolicy-895d3c5721bc3ae5df2c1db5ba28aaa4dc09ee88.tar.bz2 hardened-refpolicy-895d3c5721bc3ae5df2c1db5ba28aaa4dc09ee88.zip | |
Fix bug #424359 - Introduce proper transitions for udev init script in /run/udev
Diffstat (limited to 'policy/modules/system/udev.if')
| -rw-r--r-- | policy/modules/system/udev.if | 26 |
1 files changed, 25 insertions, 1 deletions
diff --git a/policy/modules/system/udev.if b/policy/modules/system/udev.if index 8f59ae98..54697422 100644 --- a/policy/modules/system/udev.if +++ b/policy/modules/system/udev.if @@ -276,6 +276,30 @@ interface(`udev_rw_db',` ######################################## ## <summary> +## Write dirs in /var/run/udev with the udev_tbl_t (udev database) file type +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +## <param name="name" optional="true"> +## <summary> +## Name of the directory that the file transition will work on +## </summary> +## </param> +# +interface(`udev_pid_filetrans_db_dirs',` + gen_require(` + type udev_tbl_t; + type udev_var_run_t; + ') + + filetrans_pattern($1, udev_var_run_t, udev_tbl_t, dir, $2) +') + +######################################## +## <summary> ## Write dirs in /var/run with the udev_var_run file type ## </summary> ## <param name="domain"> @@ -289,7 +313,7 @@ interface(`udev_rw_db',` ## </summary> ## </param> # -interface(`udev_pid_filetrans_run_dirs',` +interface(`udev_generic_pid_filetrans_run_dirs',` gen_require(` type udev_var_run_t; ') |