[selinux-policy: 50/3172] add search all dirs

Daniel J Walsh dwalsh at fedoraproject.org
Thu Oct 7 19:09:16 UTC 2010


commit f9438fdfd18aa165782ded902f87861e687da2c6
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Apr 26 21:12:32 2005 +0000

    add search all dirs

 refpolicy/policy/modules/system/files.if |   14 ++++++++++++++
 1 files changed, 14 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/files.if b/refpolicy/policy/modules/system/files.if
index 08ebc58..66ebcc5 100644
--- a/refpolicy/policy/modules/system/files.if
+++ b/refpolicy/policy/modules/system/files.if
@@ -41,6 +41,20 @@ class sock_file getattr;
 
 ########################################
 #
+# files_search_all_directories(type,[`optional'])
+#
+define(`files_search_all_directories',`
+requires_block_template(files_get_all_file_attributes_depend,$2)
+allow $1 file_type:dir search;
+')
+
+define(`files_get_all_file_attributes_depend',`
+attribute file_type;
+class dir search;
+')
+
+########################################
+#
 # files_read_root_dir(domain,[`optional'])
 #
 define(`files_read_root_dir',`


More information about the scm-commits mailing list