From: aranea@aixah.de (Luis Ressel)
Date: Mon, 11 Sep 2017 08:40:52 +0200
Subject: [refpolicy] [PATCH 3/4] files: Create files_map_usr_files interface
In-Reply-To: <20170911064053.6831-1-aranea@aixah.de>
References: <20170911064053.6831-1-aranea@aixah.de>
Message-ID: <20170911064053.6831-3-aranea@aixah.de>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com
---
policy/modules/kernel/files.if | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index 1b10d466..72097584 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -4838,6 +4838,25 @@ interface(`files_getattr_usr_files',`
getattr_files_pattern($1, usr_t, usr_t)
')
+########################################
+##
+## Map generic files in /usr.
+##
+##
+##
+## Domain allowed access.
+##
+##
+##
+#
+interface(`files_map_usr_files',`
+ gen_require(`
+ type usr_t;
+ ')
+
+ allow $1 usr_t:file map;
+')
+
########################################
##
## Read generic files in /usr.
--
2.14.1