diff options
| author |   Chris PeBenito <pebenito@ieee.org> | 2021-01-28 10:51:39 -0500 |
|---|---|---|
| committer |   Jason Zaman <perfinion@gentoo.org> | 2021-01-31 17:21:42 -0800 |
| commit | 2a706fe10f808aac846cef19c5362a22a6e5253c (patch) | |
| tree | 96c31bc9f2714e6ea75b2df9ab2b4ba94a7dad34 /policy/support | |
| parent | misc services patches with changes Dominick and Chris wanted (diff) | |
| download | hardened-refpolicy-2a706fe10f808aac846cef19c5362a22a6e5253c.tar.gz hardened-refpolicy-2a706fe10f808aac846cef19c5362a22a6e5253c.tar.bz2 hardened-refpolicy-2a706fe10f808aac846cef19c5362a22a6e5253c.zip | |
file_patterns.spt: Add a mmap_manage_files_pattern().
Signed-off-by: Chris PeBenito <pebenito@ieee.org>
Signed-off-by: Jason Zaman <perfinion@gentoo.org>
Diffstat (limited to 'policy/support')
| -rw-r--r-- | policy/support/file_patterns.spt | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/policy/support/file_patterns.spt b/policy/support/file_patterns.spt index 6ce53fa94..19fcf2755 100644 --- a/policy/support/file_patterns.spt +++ b/policy/support/file_patterns.spt @@ -154,6 +154,11 @@ define(`manage_files_pattern',` allow $1 $3:file manage_file_perms; ') +define(`mmap_manage_files_pattern',` + allow $1 $2:dir rw_dir_perms; + allow $1 $3:file { manage_file_perms map }; +') + define(`relabelfrom_files_pattern',` allow $1 $2:dir search_dir_perms; allow $1 $3:file relabelfrom_file_perms; |