From: pebenito@ieee.org (Chris PeBenito) Date: Wed, 25 Oct 2017 17:15:36 -0400 Subject: [refpolicy] [PATCH] kernel/files.if: files_list_kernel_modules should grant read perms for symlinks In-Reply-To: <20171024234643.13099-1-aranea@aixah.de> References: <20171024234643.13099-1-aranea@aixah.de> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 10/24/2017 07:46 PM, Luis Ressel via refpolicy wrote: > files_search_kernel_modules also grant this; there's a couple of > symlinks in /lib/modules/. > --- > policy/modules/kernel/files.if | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if > index b3abd2961..7d3fb27e2 100644 > --- a/policy/modules/kernel/files.if > +++ b/policy/modules/kernel/files.if > @@ -3964,6 +3964,7 @@ interface(`files_list_kernel_modules',` > ') > > allow $1 modules_object_t:dir list_dir_perms; > + read_lnk_files_pattern($1, modules_object_t, modules_object_t) > ') > > ######################################## Merged. -- Chris PeBenito