CaROS/meta-selinux
3
0
Fork 0
mirror of git://git.yoctoproject.org/meta-selinux synced 2026-01-01 13:58:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

refpolicy: files - add files_delete_var_chr_files interface

Browse Source 
Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
This commit is contained in:
Clayton Casciato 2025-10-23 11:25:49 -06:00 committed by Yi Zhao
parent bc0f6e1a10
commit 7df9cb7fca
2 changed files with 45 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
recipes-security/refpolicy/refpolicy/0077-policy-modules-kernel-files-add-files_delete_var_chr.patch Normal file
View File

@ -0,0 +1,44 @@
From a8379a82beb37fbe36775575b8d43d1281342bba Mon Sep 17 00:00:00 2001
From: Clayton Casciato <ccasciato@21sw.us>
Date: Mon, 12 May 2025 12:39:10 -0600
Subject: [PATCH] files: add files_delete_var_chr_files interface
Signed-off-by: Clayton Casciato <ccasciato@21sw.us>
Upstream-Status: Backport [https://github.com/SELinuxProject/refpolicy/commit/605ee571a04d7db29f61dc086ad4675793d94864]
Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
---
policy/modules/kernel/files.if | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index 9ade962a9..7223210f4 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -6127,6 +6127,25 @@ interface(`files_manage_var_symlinks',`
manage_lnk_files_pattern($1, var_t, var_t)
')
+########################################
+## <summary>
+## Delete character device nodes in
+## the var directory.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`files_delete_var_chr_files',`
+ gen_require(`
+ type var_t;
+ ')
+
+ delete_chr_files_pattern($1, var_t, var_t)
+')
+
########################################
## <summary>
## Create objects in the /var directory

1
recipes-security/refpolicy/refpolicy_common.inc
View File

@ -92,6 +92,7 @@ SRC_URI += " \
file://0074-policy-modules-services-ssh-allow-sshd_t-userdomain-.patch \
file://0075-policy-modules-services-dbus-allow-system_dbusd_t-un.patch \
file://0076-policy-modules-system-systemd-allow-systemd_logind_t.patch \
file://0077-policy-modules-kernel-files-add-files_delete_var_chr.patch \
"
S = "${WORKDIR}/refpolicy"