* [refpolicy] [PATCH] init: add init_rw_inherited_stream_socket
@ 2018-01-04 21:51 Christian Göttsche
2018-01-05 21:21 ` Chris PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: Christian Göttsche @ 2018-01-04 21:51 UTC (permalink / raw)
To: refpolicy
---
policy/modules/system/init.if | 18 ++++++++++++++++++
1 file changed, 18 insertions(+)
diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
index 622bcec57..326581ecc 100644
--- a/policy/modules/system/init.if
+++ b/policy/modules/system/init.if
@@ -889,6 +889,24 @@ interface(`init_dgram_send',`
allow $1 init_t:unix_stream_socket getattr;
')
+########################################
+## <summary>
+## Read and write to inherited init unix streams.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`init_rw_inherited_stream_socket',`
+ gen_require(`
+ type init_t;
+ ')
+
+ allow $1 init_t:unix_stream_socket { getattr read write ioctl };
+')
+
########################################
## <summary>
## Allow the specified domain to read/write to
--
2.15.1
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [refpolicy] [PATCH] init: add init_rw_inherited_stream_socket
2018-01-04 21:51 [refpolicy] [PATCH] init: add init_rw_inherited_stream_socket Christian Göttsche
@ 2018-01-05 21:21 ` Chris PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Chris PeBenito @ 2018-01-05 21:21 UTC (permalink / raw)
To: refpolicy
On 01/04/2018 04:51 PM, Christian G?ttsche via refpolicy wrote:
> ---
> policy/modules/system/init.if | 18 ++++++++++++++++++
> 1 file changed, 18 insertions(+)
>
> diff --git a/policy/modules/system/init.if b/policy/modules/system/init.if
> index 622bcec57..326581ecc 100644
> --- a/policy/modules/system/init.if
> +++ b/policy/modules/system/init.if
> @@ -889,6 +889,24 @@ interface(`init_dgram_send',`
> allow $1 init_t:unix_stream_socket getattr;
> ')
>
> +########################################
> +## <summary>
> +## Read and write to inherited init unix streams.
> +## </summary>
> +## <param name="domain">
> +## <summary>
> +## Domain allowed access.
> +## </summary>
> +## </param>
> +#
> +interface(`init_rw_inherited_stream_socket',`
> + gen_require(`
> + type init_t;
> + ')
> +
> + allow $1 init_t:unix_stream_socket { getattr read write ioctl };
> +')
> +
> ########################################
> ## <summary>
> ## Allow the specified domain to read/write to
Merged.
--
Chris PeBenito
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2018-01-05 21:21 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-01-04 21:51 [refpolicy] [PATCH] init: add init_rw_inherited_stream_socket Christian Göttsche
2018-01-05 21:21 ` Chris PeBenito
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).