[selinux-policy: 1631/3172] add seutil_rw_config()
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 21:26:06 UTC 2010
commit d5ae683e2bdd1516dd02cba95347140510a75a5f
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Wed Oct 25 20:48:04 2006 +0000
add seutil_rw_config()
policy/modules/system/selinuxutil.if | 21 +++++++++++++++++++++
1 files changed, 21 insertions(+), 0 deletions(-)
---
diff --git a/policy/modules/system/selinuxutil.if b/policy/modules/system/selinuxutil.if
index 6d87f29..5579a34 100644
--- a/policy/modules/system/selinuxutil.if
+++ b/policy/modules/system/selinuxutil.if
@@ -674,6 +674,27 @@ interface(`seutil_read_config',`
allow $1 selinux_config_t:lnk_file { getattr read };
')
+########################################
+## <summary>
+## Read and write the general SELinux configuration files.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+## <rolecap/>
+#
+interface(`seutil_rw_config',`
+ gen_require(`
+ type selinux_config_t;
+ ')
+
+ files_search_etc($1)
+ allow $1 selinux_config_t:dir list_dir_perms;
+ allow $1 selinux_config_t:file rw_file_perms;
+')
+
#######################################
## <summary>
## Create, read, write, and delete
More information about the scm-commits
mailing list