2017-10-24 23:46:43

by Mira Ressel

Subject: [refpolicy] [PATCH] kernel/files.if: files_list_kernel_modules should grant read perms for symlinks

files_search_kernel_modules also grant this; there's a couple of
symlinks in /lib/modules/.
---
policy/modules/kernel/files.if | 1 +
1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index b3abd2961..7d3fb27e2 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -3964,6 +3964,7 @@ interface(`files_list_kernel_modules',`
')

allow $1 modules_object_t:dir list_dir_perms;
+ read_lnk_files_pattern($1, modules_object_t, modules_object_t)
')

########################################
--
2.14.3

2017-10-25 21:15:36

by Chris PeBenito

Subject: [refpolicy] [PATCH] kernel/files.if: files_list_kernel_modules should grant read perms for symlinks

On 10/24/2017 07:46 PM, Luis Ressel via refpolicy wrote:
> files_search_kernel_modules also grant this; there's a couple of
> symlinks in /lib/modules/.
> ---
> policy/modules/kernel/files.if | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
> index b3abd2961..7d3fb27e2 100644
> --- a/policy/modules/kernel/files.if
> +++ b/policy/modules/kernel/files.if
> @@ -3964,6 +3964,7 @@ interface(`files_list_kernel_modules',`
> ')
>
> allow $1 modules_object_t:dir list_dir_perms;
> + read_lnk_files_pattern($1, modules_object_t, modules_object_t)
> ')
>
> ########################################

Merged.

--
Chris PeBenito