Skip to contentSkip to conversation

Changes to the modutils policy module

PATCH New Dominick Grift 2 participants 2 messages Oct 15, 2012 – Oct 19, 2012

lore
Share & tools
lore

Dominick Grift

author
#0 lore raw

PATCH 1/1 Changes to the modutils policy module

modutils_read_module_config() provides access to list modules_conf_t directories so that we do not need a seperate modutils_list_modules_config()

Signed-off-by Dominick Grift <[email protected]>
policy/modules/system/modutils.if +3 -2
index 350c450..7449974 100644
@@ -59,8 +59,9 @@
 	files_search_etc($1)
 	files_search_boot($1)
 
-	read_files_pattern($1, modules_conf_t, modules_conf_t)
-	read_lnk_files_pattern($1, modules_conf_t, modules_conf_t)
+	allow $1 modules_conf_t:dir list_dir_perms;
+	allow $1 modules_conf_t:file read_file_perms;
+	allow $1 modules_conf_t:lnk_file read_lnk_file_perms;
 ')
 
 ########################################
#1 lore raw

PATCH 1/1 Changes to the modutils policy module

Quoted 11 lines · Dominick Grift

modutils_read_module_config() provides access to list modules_conf_t directories so that we do not need a seperate modutils_list_modules_config()

Signed-off-by Dominick Grift <[email protected]>
policy/modules/system/modutils.if +0 -0
index 350c450..7449974 100644

policy/modules/system/modutils.if line 65

Quoted 9 lines
policy/modules/system/modutils.if +3 -2
@@ -59,8 +59,9 @@
 	files_search_etc($1)
 	files_search_boot($1)
 
-	read_files_pattern($1, modules_conf_t, modules_conf_t)
-	read_lnk_files_pattern($1, modules_conf_t, modules_conf_t)
+	allow $1 modules_conf_t:dir list_dir_perms;
+	allow $1 modules_conf_t:file read_file_perms;
+	allow $1 modules_conf_t:lnk_file read_lnk_file_perms;
 ')

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com