Skip to content

Commit 5bbd3f4

Browse files
jsegitzmoritzbuhl
authored andcommitted
Introduce tabrmd_rw_unix_stream_sockets SELinux interface
ATM there's only tabrmd_create_unix_stream_sockets, but some domains only need to use the socket, not create it. Signed-off-by: Johannes Segitz <jsegitz@suse.de>
1 parent f3c22d8 commit 5bbd3f4

1 file changed

Lines changed: 18 additions & 0 deletions

File tree

selinux/tabrmd.if

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,24 @@ interface(`tabrmd_create_unix_stream_sockets',`
1818
allow $1 tabrmd_t:unix_stream_socket create_stream_socket_perms;
1919
')
2020

21+
########################################
22+
## <summary>
23+
## Use a unix stream socket
24+
## </summary>
25+
## <param name="domain">
26+
## <summary>
27+
## Domain allowed access.
28+
## </summary>
29+
## </param>
30+
#
31+
interface(`tabrmd_rw_unix_stream_sockets',`
32+
gen_require(`
33+
type tabrmd_t;
34+
')
35+
36+
allow $1 tabrmd_t:unix_stream_socket rw_socket_perms;
37+
')
38+
2139
########################################
2240
## <summary>
2341
## Send messages to and from

0 commit comments

Comments
 (0)