From 7f06590a154df349b72c68f8c75025e0affa26c0 Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Jun 19 2012 15:17:52 +0000 Subject: Add kdump_manage_tmp_files() interface --- diff --git a/kdump.if b/kdump.if index 9bf4898..90f8a95 100644 --- a/kdump.if +++ b/kdump.if @@ -117,6 +117,26 @@ interface(`kdump_manage_config',` allow $1 kdump_etc_t:file manage_file_perms; ') +################################### +## +## Manage kdump /var/tmp files. +## +## +## +## Domain allowed access. +## +## +# +interface(`kdump_manage_tmp_files',` + gen_require(` + type kdump_tmp_t; + ') + + files_search_tmp($1) + manage_files_pattern($1, kdump_tmp_t, kdump_tmp_t) + manager_dirs_pattern($1, kdump_tmp_t, kdump_tmp_t) +') + ###################################### ## ## All of the rules required to administrate diff --git a/kdump.te b/kdump.te index b28c875..d5a44cf 100644 --- a/kdump.te +++ b/kdump.te @@ -33,9 +33,8 @@ read_files_pattern(kdump_t, kdump_etc_t, kdump_etc_t) manage_dirs_pattern(kdump_t, kdump_tmp_t, kdump_tmp_t) manage_files_pattern(kdump_t, kdump_tmp_t, kdump_tmp_t) -manage_sock_files_pattern(kdump_t, kdump_tmp_t, kdump_tmp_t) manage_lnk_files_pattern(kdump_t, kdump_tmp_t, kdump_tmp_t) -files_tmp_filetrans(kdump_t, kdump_tmp_t, { file dir lnk_file sock_file }) +files_tmp_filetrans(kdump_t, kdump_tmp_t, { file dir lnk_file }) files_read_etc_files(kdump_t) files_read_etc_runtime_files(kdump_t)