Skip to content

Commit 62f6815

Browse files
authored
Allow keylime_server_t getattr of filesystem_type
Allow the keylime_server_t domain to get the attributes of all filesystems.
1 parent c7e420d commit 62f6815

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

keylime.te

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,7 @@ allow keylime_server_t self:udp_socket create_stream_socket_perms;
8383
manage_dirs_pattern(keylime_server_t, keylime_log_t, keylime_log_t)
8484
manage_files_pattern(keylime_server_t, keylime_log_t, keylime_log_t)
8585

86+
fs_getattr_all_fs(keylime_server_t)
8687
fs_rw_inherited_tmpfs_files(keylime_server_t)
8788

8889
optional_policy(`
@@ -141,4 +142,4 @@ optional_policy(`
141142
optional_policy(`
142143
tabrmd_create_unix_stream_sockets(keylime_agent_t)
143144
tabrmd_dbus_chat(keylime_agent_t)
144-
')
145+
')

0 commit comments

Comments
 (0)