Merge "Allow domains to stat filesystems."
am: e1224de04d
* commit 'e1224de04d9c6ea52e753151441cdb378891cf6f':
Allow domains to stat filesystems.
This commit is contained in:
commit
f6da64bfb3
2 changed files with 4 additions and 4 deletions
|
@ -127,6 +127,10 @@ allow domain debugfs:dir search;
|
|||
allow domain debugfs_tracing:dir search;
|
||||
allow domain debugfs_trace_marker:file w_file_perms;
|
||||
|
||||
# Filesystem access.
|
||||
allow domain fs_type:filesystem getattr;
|
||||
allow domain fs_type:dir getattr;
|
||||
|
||||
###
|
||||
### neverallow rules
|
||||
###
|
||||
|
|
|
@ -25,10 +25,6 @@ allow domain_deprecated rootfs:lnk_file r_file_perms;
|
|||
# Device accesses.
|
||||
allow domain_deprecated device:file read;
|
||||
|
||||
# Filesystem accesses.
|
||||
allow domain_deprecated fs_type:filesystem getattr;
|
||||
allow domain_deprecated fs_type:dir getattr;
|
||||
|
||||
# System file accesses.
|
||||
allow domain_deprecated system_file:dir r_dir_perms;
|
||||
allow domain_deprecated system_file:file r_file_perms;
|
||||
|
|
Loading…
Reference in a new issue