selinux-policy/backport-Add-systemd_getattr_generic_unit_files-interface.patch
2022-09-15 09:20:10 +08:00

46 lines
1.3 KiB
Diff

From 9010f07e78944ccab50bcf3bf2640f6aad3cc8cb Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Wed, 30 Mar 2022 21:29:47 +0200
Subject: [PATCH] Add systemd_getattr_generic_unit_files() interface
Reference: https://gitbub.com/fedora-selinux/selinux-policy/commit/9010f07e78944ccab50bcf3bf2640f6aad3cc8cb
Conflict: NA
Signed-off-by: lujie54 <lujie54@huawei.com>
---
policy/modules/system/systemd.if | 18 ++++++++++++++++++
1 file changed, 18 insertions(+)
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index 351438c..5567da7 100644
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -1597,6 +1597,24 @@ interface(`systemd_unit_file_filetrans',`
#######################################
## <summary>
+## Get attributes of generic systemd unit files.
+## </summary>
+## <param name="domain">
+## <summary>
+## Domain allowed access.
+## </summary>
+## </param>
+#
+interface(`systemd_getattr_generic_unit_files',`
+ gen_require(`
+ type systemd_unit_file_t;
+ ')
+
+ getattr_files_pattern($1, systemd_unit_file_t, systemd_unit_file_t)
+')
+
+#######################################
+## <summary>
## Create a directory in the /usr/lib/systemd/system directory.
## </summary>
## <param name="domain">
--
1.8.3.1