: patch to add a missing interface in the sysnetwork module
PATCH 27/34 : patch to add a missing interface in the sysnetwork module
This patch adds a new interface to the sysnetwork module so that the DHCP client state directories can be searched.
policy/modules/system/sysnetwork.if +20 -0
@@ -215,6 +215,26 @@ interface(`sysnet_rw_dhcp_config',` ######################################## ## <summary> +## Search the DHCP client state +## directories. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`sysnet_search_dhcpc_state',` + gen_require(` + type dhcpc_state_t; + ') + + files_search_var_lib($1) + allow $1 dhcpc_state_t:dir search_dir_perms; +') + +######################################## +## <summary> ## Read dhcp client state files. ## </summary> ## <param name="domain">
PATCH 27/34 : patch to add a missing interface in the sysnetwork module
Quoted 2 lines · Guido Trentalancia
This patch adds a new interface to the sysnetwork module so that the DHCP client state directories can be searched.
Merged.
Quoted 30 lines
diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/system/sysnetwork.if refpolicy-git-02022011-new/policy/modules/system/sysnetwork.if
policy/modules/system/sysnetwork.if +20
-0@@ -215,6 +215,26 @@ interface(`sysnet_rw_dhcp_config',` ######################################## ## <summary> +## Search the DHCP client state +## directories. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`sysnet_search_dhcpc_state',` + gen_require(` + type dhcpc_state_t; + ') + + files_search_var_lib($1) + allow $1 dhcpc_state_t:dir search_dir_perms; +') + +######################################## +## <summary> ## Read dhcp client state files. ## </summary> ## <param name="domain">
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com