commit:     ab5e77931352bf9a38c3bd273b833329de9cb050
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Sun Sep 10 12:51:09 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Sep 10 12:51:09 2017 +0000
URL:        
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=ab5e7793

userdomain: allow map user_tmpfs_t files

 policy/modules/system/userdomain.if | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/userdomain.if 
b/policy/modules/system/userdomain.if
index 88704b71..84e9c57e 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -401,6 +401,7 @@ interface(`userdom_manage_tmpfs_role',`
                type user_tmpfs_t;
        ')
 
+       allow $2 user_tmpfs_t:file map;
        manage_dirs_pattern($2, user_tmpfs_t, user_tmpfs_t)
        manage_files_pattern($2, user_tmpfs_t, user_tmpfs_t)
        manage_lnk_files_pattern($2, user_tmpfs_t, user_tmpfs_t)

Reply via email to