Skip to contentSkip to conversation

: patch to add a missing interface in the sysnetwork module

PATCH New Guido Trentalancia 2 participants 2 messages Feb 16, 2011 – Feb 28, 2011

lore
Share & tools
lore
#0 lore raw

PATCH 27/34 : patch to add a missing interface in the sysnetwork module

This patch adds a new interface to the sysnetwork module so that the DHCP client state directories can be searched.

policy/modules/system/sysnetwork.if +20 -0
diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/system/sysnetwork.if refpolicy-git-02022011-new/policy/modules/system/sysnetwork.if
@@ -215,6 +215,26 @@ interface(`sysnet_rw_dhcp_config',`
 
 ########################################
 ## <summary>
+##      Search the DHCP client state
+##      directories.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`sysnet_search_dhcpc_state',`
+	gen_require(`
+		type dhcpc_state_t;
+	')
+
+	files_search_var_lib($1)
+	allow $1 dhcpc_state_t:dir search_dir_perms;
+')
+
+########################################
+## <summary>
 ##	Read dhcp client state files.
 ## </summary>
 ## <param name="domain">
#1 lore raw

PATCH 27/34 : patch to add a missing interface in the sysnetwork module

Quoted 2 lines · Guido Trentalancia

This patch adds a new interface to the sysnetwork module so that the DHCP client state directories can be searched.

Merged.

Quoted 30 lines

diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/system/sysnetwork.if refpolicy-git-02022011-new/policy/modules/system/sysnetwork.if

policy/modules/system/sysnetwork.if +20 -0
@@ -215,6 +215,26 @@ interface(`sysnet_rw_dhcp_config',`
 
 ########################################
 ## <summary>
+##      Search the DHCP client state
+##      directories.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`sysnet_search_dhcpc_state',`
+	gen_require(`
+		type dhcpc_state_t;
+	')
+
+	files_search_var_lib($1)
+	allow $1 dhcpc_state_t:dir search_dir_perms;
+')
+
+########################################
+## <summary>
 ##	Read dhcp client state files.
 ## </summary>
 ## <param name="domain">
Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com