commit: 01775f1aa6754ec1b90f1497fbe08592c710e4a3 Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> AuthorDate: Fri Aug 8 12:33:18 2014 +0000 Commit: Sven Vermeulen <swift <AT> gentoo <DOT> org> CommitDate: Fri Aug 15 09:57:59 2014 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=01775f1a
Introduce kernel_delete_unlabeled_symlinks The kernel_delete_unlabeled_symlinks interface is called by the files_delete_isid_type_symlinks interface (in kernel/files.if). This interface is deprecated (and calls kernel_delete_unlabeled_symlinks). Signed-off-by: Sven Vermeulen <sven.vermeulen <AT> siphos.be> --- policy/modules/kernel/kernel.if | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if index 18cef42..0ef8242 100644 --- a/policy/modules/kernel/kernel.if +++ b/policy/modules/kernel/kernel.if @@ -2556,6 +2556,24 @@ interface(`kernel_dontaudit_read_unlabeled_files',` ######################################## ## <summary> +## Delete unlabeled symbolic links. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`kernel_delete_unlabeled_symlinks',` + gen_require(` + type unlabeled_t; + ') + + delete_lnk_files_pattern($1, unlabeled_t, unlabeled_t) +') + +######################################## +## <summary> ## Create, read, write, and delete unlabeled symbolic links. ## </summary> ## <param name="domain">
