Skip to content
Snippets Groups Projects
Commit 093ea6fb authored by SimHyunYong's avatar SimHyunYong
Browse files

Using r_dir_file macro in domain.te

r_dir_file(domain, self)

allow domain self:dir r_dir_perms;
allow domain self:lnk_file r_file_perms;
allow domain self:file r_file_perms;

te_macros
define(`r_dir_file', `
allow $1 $2:dir r_dir_perms;
allow $1 $2:{ file lnk_file } r_file_perms;
')

Change-Id: I7338f63a1eaa8ca52cd31b51ce841e3dbe46ad4f
parent cdae042a
No related branches found
No related tags found
No related merge requests found
......@@ -24,8 +24,7 @@ allow domain self:process {
allow domain self:fd use;
allow domain proc:dir search;
allow domain proc_net:dir search;
allow domain self:dir r_dir_perms;
allow domain self:lnk_file r_file_perms;
r_dir_file(domain, self)
allow domain self:{ fifo_file file } rw_file_perms;
allow domain self:unix_dgram_socket { create_socket_perms sendto };
allow domain self:unix_stream_socket { create_stream_socket_perms connectto };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment