public inbox for gentoo-commits@lists.gentoo.org
 help / color / mirror / Atom feed
* [gentoo-commits] proj/hardened-refpolicy:swift commit in: policy/support/
@ 2018-01-18 16:15 Sven Vermeulen
  0 siblings, 0 replies; only message in thread
From: Sven Vermeulen @ 2018-01-18 16:15 UTC (permalink / raw
  To: gentoo-commits

commit:     21c5fa41199d120c33d7b981e8bf6b09692ed7bd
Author:     Chris PeBenito <pebenito <AT> ieee <DOT> org>
AuthorDate: Thu Dec 14 00:01:45 2017 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Thu Dec 14 05:08:28 2017 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=21c5fa41

Add missing mmap_*_files_pattern macros.

 policy/support/file_patterns.spt | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/policy/support/file_patterns.spt b/policy/support/file_patterns.spt
index d2e0dc2c..cd89f99c 100644
--- a/policy/support/file_patterns.spt
+++ b/policy/support/file_patterns.spt
@@ -99,6 +99,11 @@ define(`read_files_pattern',`
 	allow $1 $3:file read_file_perms;
 ')
 
+define(`mmap_read_files_pattern',`
+	allow $1 $2:dir search_dir_perms;
+	allow $1 $3:file mmap_read_file_perms;
+')
+
 define(`mmap_files_pattern',`
 	# deprecated 20171213
 	refpolicywarn(`mmap_files_pattern() is deprecated, please use mmap_exec_files_pattern() instead')
@@ -131,6 +136,11 @@ define(`rw_files_pattern',`
 	allow $1 $3:file rw_file_perms;
 ')
 
+define(`mmap_rw_files_pattern',`
+	allow $1 $2:dir search_dir_perms;
+	allow $1 $3:file mmap_rw_file_perms;
+')
+
 define(`create_files_pattern',`
 	allow $1 $2:dir add_entry_dir_perms;
 	allow $1 $3:file create_file_perms;


^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2018-01-18 16:15 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-01-18 16:15 [gentoo-commits] proj/hardened-refpolicy:swift commit in: policy/support/ Sven Vermeulen

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox