[gentoo-commits] proj/hardened-refpolicy:next commit in: policy/modules/kernel/

["Jason Zaman" <perfinion@gentoo.org>]

commit:     f17aea4c3e4b4c9848d7fe4132cf8652ba3f58a6
Author:     Jason Zaman <jason <AT> perfinion <DOT> com>
AuthorDate: Sun Sep 10 12:49:59 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Sep 10 12:49:59 2017 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f17aea4c

files: Allow files_*_etc_files to map files

 policy/modules/kernel/files.if | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/policy/modules/kernel/files.if b/policy/modules/kernel/files.if
index 7a15f1dd..f2b76f86 100644
--- a/policy/modules/kernel/files.if
+++ b/policy/modules/kernel/files.if
@@ -2920,6 +2920,7 @@ interface(`files_read_etc_files',`
 	')
 
 	allow $1 etc_t:dir list_dir_perms;
+	allow $1 etc_t:file map;
 	read_files_pattern($1, etc_t, etc_t)
 	read_lnk_files_pattern($1, etc_t, etc_t)
 ')
@@ -2959,6 +2960,7 @@ interface(`files_rw_etc_files',`
 	')
 
 	allow $1 etc_t:dir list_dir_perms;
+	allow $1 etc_t:file map;
 	rw_files_pattern($1, etc_t, etc_t)
 	read_lnk_files_pattern($1, etc_t, etc_t)
 ')
@@ -2980,6 +2982,7 @@ interface(`files_manage_etc_files',`
 		type etc_t;
 	')
 
+	allow $1 etc_t:file map;
 	manage_files_pattern($1, etc_t, etc_t)
 	read_lnk_files_pattern($1, etc_t, etc_t)
 ')