commit: c67b1ee5089ea859ab1560ae3ff43d3e731151d9
Author: Amadeusz Sławiński <amade <AT> asmblr <DOT> net>
AuthorDate: Tue Oct 17 20:39:17 2017 +0000
Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Oct 29 13:57:28 2017 +0000
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c67b1ee5
lvm: allow map perms on lvm_etc_t
Signed-off-by: Amadeusz Sławiński <amade <AT> asmblr.net>
policy/modules/system/lvm.te | 1 +
1 file changed, 1 insertion(+)
diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
index f75f2645..7c601fad 100644
--- a/policy/modules/system/lvm.te
+++ b/policy/modules/system/lvm.te
@@ -211,6 +211,7 @@ manage_sock_files_pattern(lvm_t, lvm_var_run_t,
lvm_var_run_t)
files_pid_filetrans(lvm_t, lvm_var_run_t, { file sock_file })
read_files_pattern(lvm_t, lvm_etc_t, lvm_etc_t)
+allow lvm_t lvm_etc_t:file map;
read_lnk_files_pattern(lvm_t, lvm_etc_t, lvm_etc_t)
# Write to /etc/lvm, /etc/lvmtab, /etc/lvmtab.d
manage_files_pattern(lvm_t, lvm_metadata_t, lvm_metadata_t)
