All of lore.kernel.org
 help / color / mirror / Atom feed
* [refpolicy] [PATCH] Changes to the modutils policy module
@ 2012-10-15 10:26 Dominick Grift
  2012-10-19 13:20 ` Christopher J. PeBenito
  0 siblings, 1 reply; 2+ messages in thread
From: Dominick Grift @ 2012-10-15 10:26 UTC (permalink / raw)
  To: refpolicy


modutils_read_module_config() provides access to list modules_conf_t
directories so that we do not need a seperate
modutils_list_modules_config()

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
diff --git a/policy/modules/system/modutils.if b/policy/modules/system/modutils.if
index 350c450..7449974 100644
--- a/policy/modules/system/modutils.if
+++ b/policy/modules/system/modutils.if
@@ -59,8 +59,9 @@
 	files_search_etc($1)
 	files_search_boot($1)
 
-	read_files_pattern($1, modules_conf_t, modules_conf_t)
-	read_lnk_files_pattern($1, modules_conf_t, modules_conf_t)
+	allow $1 modules_conf_t:dir list_dir_perms;
+	allow $1 modules_conf_t:file read_file_perms;
+	allow $1 modules_conf_t:lnk_file read_lnk_file_perms;
 ')
 
 ########################################

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* [refpolicy] [PATCH] Changes to the modutils policy module
  2012-10-15 10:26 [refpolicy] [PATCH] Changes to the modutils policy module Dominick Grift
@ 2012-10-19 13:20 ` Christopher J. PeBenito
  0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2012-10-19 13:20 UTC (permalink / raw)
  To: refpolicy

On 10/15/12 06:26, Dominick Grift wrote:
> 
> modutils_read_module_config() provides access to list modules_conf_t
> directories so that we do not need a seperate
> modutils_list_modules_config()
> 
> Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
> diff --git a/policy/modules/system/modutils.if b/policy/modules/system/modutils.if
> index 350c450..7449974 100644
> --- a/policy/modules/system/modutils.if
> +++ b/policy/modules/system/modutils.if
> @@ -59,8 +59,9 @@
>  	files_search_etc($1)
>  	files_search_boot($1)
>  
> -	read_files_pattern($1, modules_conf_t, modules_conf_t)
> -	read_lnk_files_pattern($1, modules_conf_t, modules_conf_t)
> +	allow $1 modules_conf_t:dir list_dir_perms;
> +	allow $1 modules_conf_t:file read_file_perms;
> +	allow $1 modules_conf_t:lnk_file read_lnk_file_perms;
>  ')

Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2012-10-19 13:20 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-10-15 10:26 [refpolicy] [PATCH] Changes to the modutils policy module Dominick Grift
2012-10-19 13:20 ` Christopher J. PeBenito

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.