diff options
| author |   Russell Coker <russell@coker.com.au> | 2023-09-28 23:55:56 +1000 |
|---|---|---|
| committer |   Kenton Groombridge <concord@gentoo.org> | 2023-10-06 11:30:52 -0400 |
| commit | 3cf4d89db3171671a05868dd5ecaf933c49fcaa4 (patch) | |
| tree | 14fadf3c3a98b3939e3d811495af90a0eabeb159 /policy/modules/kernel/storage.if | |
| parent | misc small patches for cron policy (#701) (diff) | |
| download | hardened-refpolicy-3cf4d89db3171671a05868dd5ecaf933c49fcaa4.tar.gz hardened-refpolicy-3cf4d89db3171671a05868dd5ecaf933c49fcaa4.tar.bz2 hardened-refpolicy-3cf4d89db3171671a05868dd5ecaf933c49fcaa4.zip | |
mon.te patches as well as some fstools patches related to it (#697)
* Patches for mon, mostly mon local monitoring.
Also added the fsdaemon_read_lib() interface and fstools patch because it
also uses fsdaemon_read_lib() and it's called by monitoring scripts
Signed-off-by: Russell Coker <russell@coker.com.au>
* Added the files_dontaudit_tmpfs_file_getattr() and
storage_dev_filetrans_fixed_disk_control() interfaces needed
Signed-off-by: Russell Coker <russell@coker.com.au>
* Fixed the issues from the review
Signed-off-by: Russell Coker <russell@coker.com.au>
* Specify name to avoid conflicting file trans
Signed-off-by: Russell Coker <russell@coker.com.au>
* fixed dontaudi_ typo
Signed-off-by: Russell Coker <russell@coker.com.au>
* Changed storage_dev_filetrans_fixed_disk to have a mandatory parameter for the object class
Signed-off-by: Russell Coker <russell@coker.com.au>
* Remove fsdaemon_read_lib as it was already merged
Signed-off-by: Russell Coker <russell@coker.com.au>
---------
Signed-off-by: Russell Coker <russell@coker.com.au>
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
Diffstat (limited to 'policy/modules/kernel/storage.if')
| -rw-r--r-- | policy/modules/kernel/storage.if | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/policy/modules/kernel/storage.if b/policy/modules/kernel/storage.if index 9c581a910..777caea69 100644 --- a/policy/modules/kernel/storage.if +++ b/policy/modules/kernel/storage.if @@ -296,6 +296,11 @@ interface(`storage_manage_fixed_disk',` ## Domain allowed access. ## </summary> ## </param> +## <param name="object_class"> +## <summary> +## The class of the object to be created. +## </summary> +## </param> ## <param name="filename" optional="true"> ## <summary> ## Optional filename of the block device to be created @@ -307,7 +312,7 @@ interface(`storage_dev_filetrans_fixed_disk',` type fixed_disk_device_t; ') - dev_filetrans($1, fixed_disk_device_t, blk_file, $2) + dev_filetrans($1, fixed_disk_device_t, $2, $3) ') ######################################## |