From: dominick.grift@gmail.com (Dominick Grift) Date: Sun, 21 Oct 2012 14:20:12 +0200 Subject: [refpolicy] [PATCH 02/10] For svirt_lxc_domain In-Reply-To: <1350822019-15079-1-git-send-email-dominick.grift@gmail.com> References: <1350822019-15079-1-git-send-email-dominick.grift@gmail.com> Message-ID: <1350822019-15079-3-git-send-email-dominick.grift@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- policy/modules/system/clock.if | 19 +++++++++++++++++++ 1 files changed, 19 insertions(+), 0 deletions(-) diff --git a/policy/modules/system/clock.if b/policy/modules/system/clock.if index e2f6d93..2734f43 100644 --- a/policy/modules/system/clock.if +++ b/policy/modules/system/clock.if @@ -82,6 +82,25 @@ interface(`clock_dontaudit_write_adjtime',` ######################################## ## +## Read clock drift adjustments. +## +## +## +## Domain allowed access. +## +## +# +interface(`clock_read_adjtime',` + gen_require(` + type adjtime_t; + ') + + files_list_etc($1) + allow $1 adjtime_t:file read_file_perms; +') + +######################################## +## ## Read and write clock drift adjustments. ## ## -- 1.7.7.6