tequilaOS/platform_external_selinux
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy: We should be creating _exec interfaces when we create the domtrans interface

Browse source 
Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
This commit is contained in:
Dan Walsh 2017-05-03 12:30:25 +02:00 committed by Stephen Smalley
parent 8dfdb38db9
commit 1353988d58
1 changed files with 20 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
python/sepolicy/sepolicy/templates/executable.py
View file

@ -220,7 +220,7 @@ if_program_rules="""
########################################
## <summary>
## Execute TEMPLATE in the TEMPLATETYPE domin.
## Execute TEMPLATETYPE_exec_t in the TEMPLATETYPE domin.
## </summary>
## <param name=\"domain\">
## <summary>
@ -236,6 +236,25 @@ interface(`TEMPLATETYPE_domtrans',`
corecmd_search_bin($1)
domtrans_pattern($1, TEMPLATETYPE_exec_t, TEMPLATETYPE_t)
')
######################################
## <summary>
## Execute TEMPLATETYPE in the caller domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`TEMPLATETYPE_exec',`
gen_require(`
type TEMPLATETYPE_exec_t;
')
corecmd_search_bin($1)
can_exec($1, TEMPLATETYPE_exec_t)
')
"""
if_user_program_rules="""