From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Mon, 28 Feb 2011 09:40:10 -0500
Subject: [refpolicy] [PATCH 27/34]: patch to add a missing interface in
 the sysnetwork module
In-Reply-To: <1297838026.3205.104.camel@tesla.lan>
References: <1297838026.3205.104.camel@tesla.lan>
Message-ID: <4D6BB3CA.9050708@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 02/16/11 01:33, Guido Trentalancia wrote:
> This patch adds a new interface to the sysnetwork module so
> that the DHCP client state directories can be searched.

Merged.

> diff -pruN -x booleans.conf -x corenetwork.if -x corenetwork.te -x modules.conf refpolicy-git-02022011/policy/modules/system/sysnetwork.if refpolicy-git-02022011-new/policy/modules/system/sysnetwork.if
> --- refpolicy-git-02022011/policy/modules/system/sysnetwork.if	2011-01-08 19:07:21.362760308 +0100
> +++ refpolicy-git-02022011-new/policy/modules/system/sysnetwork.if	2011-01-26 02:00:41.013048782 +0100
> @@ -215,6 +215,26 @@ interface(`sysnet_rw_dhcp_config',`
>  
>  ########################################
>  ## <summary>
> +##      Search the DHCP client state
> +##      directories.
> +## </summary>
> +## <param name="domain">
> +##      <summary>
> +##      Domain allowed access.
> +##      </summary>
> +## </param>
> +#
> +interface(`sysnet_search_dhcpc_state',`
> +	gen_require(`
> +		type dhcpc_state_t;
> +	')
> +
> +	files_search_var_lib($1)
> +	allow $1 dhcpc_state_t:dir search_dir_perms;
> +')
> +
> +########################################
> +## <summary>
>  ##	Read dhcp client state files.
>  ## </summary>
>  ## <param name="domain">

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com