[gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/kernel/

[Jason Zaman]

commit:     f17aea4c3e4b4c9848d7fe4132cf8652ba3f58a6
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Sun Sep 10 12:49:59 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Sep 10 12:49:59 2017 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f17aea4c

files: Allow files_*_etc_files to map files

 policy/modules/kernel/files.if | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index 7a15f1dd..f2b76f86 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -2920,6 +2920,7 @@ interface(`files_read_etc_files',`
        ')
 
        allow $1 etc_t:dir list_dir_perms;
+       allow $1 etc_t:file map;
        read_files_pattern($1, etc_t, etc_t)
        read_lnk_files_pattern($1, etc_t, etc_t)
 ')
@@ -2959,6 +2960,7 @@ interface(`files_rw_etc_files',`
        ')
 
        allow $1 etc_t:dir list_dir_perms;
+       allow $1 etc_t:file map;
        rw_files_pattern($1, etc_t, etc_t)
        read_lnk_files_pattern($1, etc_t, etc_t)
 ')
@@ -2980,6 +2982,7 @@ interface(`files_manage_etc_files',`
                type etc_t;
        ')
 
+       allow $1 etc_t:file map;
        manage_files_pattern($1, etc_t, etc_t)
        read_lnk_files_pattern($1, etc_t, etc_t)
 ')