[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/kernel/

["Sven Vermeulen" <sven.vermeulen@siphos.be>]

commit:     4333d0a16ec40b0bae474107adeec7aa3ff846c9
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Fri Aug 23 17:03:59 2013 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Fri Aug 23 17:03:59 2013 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=4333d0a1

Write files in /usr/src during make tarbz2-pkg

---
 policy/modules/kernel/files.if    | 19 +++++++++++++++++++
 policy/modules/system/modutils.te |  2 +-
 2 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index 0a92678..fcc9f32 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -6680,6 +6680,25 @@ interface(`files_read_src_files',`
 	read_files_pattern($1, src_t, src_t)
 ')
 
+#########################################
+## <summary>
+##	Manage /usr/src files
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access
+##	</summary>
+## </param>
+#
+interface(`files_manage_src_files',`
+	gen_require(`
+		type src_t;
+	')
+
+	manage_files_pattern($1, src_t, src_t)
+')
+
+
 ##########################################
 ## <summary>
 ##	Create a resource in the generic lib location

diff --git a/policy/modules/system/modutils.te b/policy/modules/system/modutils.te
index 27334e0..1d85f94 100644
--- a/policy/modules/system/modutils.te
+++ b/policy/modules/system/modutils.te
@@ -337,7 +337,7 @@ ifdef(`distro_gentoo',`
 	userdom_manage_user_tmp_dirs(insmod_t)
 
 	files_list_src(insmod_t)
-	files_read_src_files(insmod_t)
+	files_manage_src_files(insmod_t)
 	files_manage_kernel_modules(insmod_t)
 	files_lib_filetrans_kernel_modules(insmod_t, dir, "modules")
 ')