[selinux-policy: 1910/3172] trunk: Definitions for open permisson on file and similar objects from Eric Paris.

[Daniel J Walsh]

commit 210607be61a1dd14460ee92799d58ac37c4da46a
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Mar 4 20:19:29 2008 +0000

    trunk: Definitions for open permisson on file and similar objects from Eric Paris.

 Changelog                   |    2 ++
 policy/flask/access_vectors |    9 +++++++++
 2 files changed, 11 insertions(+), 0 deletions(-)
---
diff --git a/Changelog b/Changelog
index 10713f2..6956ac9 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,5 @@
+- Definitions for open permisson on file and similar objects from Eric
+  Paris.
 - Apt updates for ptys and logs, from Martin Orr.
 - RPC update from Vaclav Ovsik.
 - Exim updates on Debian from Devin Carrawy.
diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index b71dcbb..f7f181c 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -125,6 +125,7 @@ inherits file
 	reparent
 	search
 	rmdir
+	open
 }
 
 class file
@@ -133,6 +134,7 @@ inherits file
 	execute_no_trans
 	entrypoint
 	execmod
+	open
 }
 
 class lnk_file
@@ -144,16 +146,23 @@ inherits file
 	execute_no_trans
 	entrypoint
 	execmod
+	open
 }
 
 class blk_file
 inherits file
+{
+	open
+}
 
 class sock_file
 inherits file
 
 class fifo_file
 inherits file
+{
+	open
+}
 
 class fd
 {