[PATCH 2/2] miscfiles: reading certs allows map permission also
"Lawrence, Stephen" <[email protected]>
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <[email protected]> |
--- policy/modules/system/miscfiles.if | 2 ++ 1 file changed, 2 insertions(+) diff --git a/policy/modules/system/miscfiles.if b/policy/modules/system/miscfiles.if index df11794a..4ff82afb 100644 --- a/policy/modules/system/miscfiles.if +++ b/policy/modules/system/miscfiles.if @@ -107,6 +107,7 @@ interface(`miscfiles_read_all_certs',` allow $1 cert_type:dir list_dir_perms; read_files_pattern($1, cert_type, cert_type) + allow $1 cert_type:file map; read_lnk_files_pattern($1, cert_type, cert_type) ') @@ -128,6 +129,7 @@ interface(`miscfiles_read_generic_certs',` allow $1 cert_t:dir list_dir_perms; read_files_pattern($1, cert_t, cert_t) + allow $1 cert_t:file map; read_lnk_files_pattern($1, cert_t, cert_t) ') -- 2.21.0