From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Tue, 05 Oct 2010 13:57:22 -0400 Subject: [refpolicy] [ patch 03/44] bootloader: search parent. In-Reply-To: <1286216636-28449-5-git-send-email-domg472@gmail.com> References: <1286216636-28449-1-git-send-email-domg472@gmail.com> <1286216636-28449-5-git-send-email-domg472@gmail.com> Message-ID: <4CAB6702.6050402@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 10/04/10 14:23, Dominick Grift wrote: > > Signed-off-by: Dominick Grift Merged. > --- > :100644 100644 2242ecd... a4a47af... M policy/modules/admin/bootloader.if > policy/modules/admin/bootloader.if | 2 ++ > 1 files changed, 2 insertions(+), 0 deletions(-) > > diff --git a/policy/modules/admin/bootloader.if b/policy/modules/admin/bootloader.if > index 2242ecd..a4a47af 100644 > --- a/policy/modules/admin/bootloader.if > +++ b/policy/modules/admin/bootloader.if > @@ -15,6 +15,7 @@ interface(`bootloader_domtrans',` > type bootloader_t, bootloader_exec_t; > ') > > + corecmd_search_bin($1) > domtrans_pattern($1, bootloader_exec_t, bootloader_t) > ') > > @@ -67,6 +68,7 @@ interface(`bootloader_rw_tmp_files',` > ') > > # FIXME: read tmp_t dir > + files_search_tmp($1) > allow $1 bootloader_tmp_t:file rw_file_perms; > ') > -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com