commit: 9fc280113ec3479814af5db91f21340f054e7aa4 Author: Chris PeBenito <pebenito <AT> ieee <DOT> org> AuthorDate: Sat Jul 30 20:25:42 2016 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Sun Jul 31 10:40:14 2016 +0000 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=9fc28011
Get attributes of generic ptys, from Russell Coker. policy/modules/kernel/terminal.if | 17 +++++++++++++++++ policy/modules/kernel/terminal.te | 2 +- 2 files changed, 18 insertions(+), 1 deletion(-) diff --git a/policy/modules/kernel/terminal.if b/policy/modules/kernel/terminal.if index 2e6a376..ed52733 100644 --- a/policy/modules/kernel/terminal.if +++ b/policy/modules/kernel/terminal.if @@ -538,6 +538,23 @@ interface(`term_relabel_pty_dirs',` ######################################## ## <summary> +## Get the attributes of generic pty devices. +## </summary> +## <param name="domain"> +## <summary> +## Domain to allow +## </summary> +## </param> +# +interface(`term_getattr_generic_ptys',` + gen_require(` + type devpts_t; + ') + + allow $1 devpts_t:chr_file getattr; +') +######################################## +## <summary> ## Do not audit attempts to get the attributes ## of generic pty devices. ## </summary> diff --git a/policy/modules/kernel/terminal.te b/policy/modules/kernel/terminal.te index 01e1516..d25f4d2 100644 --- a/policy/modules/kernel/terminal.te +++ b/policy/modules/kernel/terminal.te @@ -1,4 +1,4 @@ -policy_module(terminal, 1.14.0) +policy_module(terminal, 1.14.1) ######################################## #
