[refpolicy] [PATCH] kernel/files.if: files_list_kernel_modules should grant read perms for symlinks

Chris PeBenito pebenito at ieee.org
Wed Oct 25 21:15:36 UTC 2017


On 10/24/2017 07:46 PM, Luis Ressel via refpolicy wrote:
> files_search_kernel_modules also grant this; there's a couple of
> symlinks in /lib/modules/.
> ---
>   policy/modules/kernel/files.if | 1 +
>   1 file changed, 1 insertion(+)
> 
> diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
> index b3abd2961..7d3fb27e2 100644
> --- a/policy/modules/kernel/files.if
> +++ b/policy/modules/kernel/files.if
> @@ -3964,6 +3964,7 @@ interface(`files_list_kernel_modules',`
>   	')
>   
>   	allow $1 modules_object_t:dir list_dir_perms;
> +	read_lnk_files_pattern($1, modules_object_t, modules_object_t)
>   ')
>   
>   ########################################

Merged.

-- 
Chris PeBenito


More information about the refpolicy mailing list