From: aranea@aixah.de (Luis Ressel)
Date: Wed, 25 Oct 2017 01:46:43 +0200
Subject: [refpolicy] [PATCH] kernel/files.if: files_list_kernel_modules
	should grant read perms for symlinks
Message-ID: <20171024234643.13099-1-aranea@aixah.de>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

files_search_kernel_modules also grant this; there's a couple of
symlinks in /lib/modules/.
---
 policy/modules/kernel/files.if | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index b3abd2961..7d3fb27e2 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -3964,6 +3964,7 @@ interface(`files_list_kernel_modules',`
 	')
 
 	allow $1 modules_object_t:dir list_dir_perms;
+	read_lnk_files_pattern($1, modules_object_t, modules_object_t)
 ')
 
 ########################################
-- 
2.14.3