Attachment 160192 Details for Bug 249835 – assembled policy file which resolved the issue on my machine

assembled policy file which resolved the issue on my machine

ntfsallow.te (text/plain), 3.01 KB, created by Harald on 2007-07-29 14:28:57 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Harald

Created: 2007-07-29 14:28:57 UTC

Size: 3.01 KB

patch

obsolete

>
>module local_ntfsallow 1.0;
>
>require {
>	type mount_ntfs_t;
>	class capability dac_override;
>	class dir { getattr search };
>	class dir { getattr mounton };
>	class dir { write search };
>	class dir add_name;
>	class dir create;
>	class dir mounton;
>	class dir remove_name;
>	class dir rmdir;
>	class dir remove_name;
>	class dir search;
>	class dir write;
>	class file { read write };
>	class file { write unlink };
>	class file append;
>	class file create;
>	class file execute;
>	class file execute_no_trans;
>	class file getattr;
>	class file link;
>	class file read;
>	class file write;
>	class filesystem mount;
>	class filesystem unmount;
>}
>
>require {
>	type mnt_t;
>	class dir { getattr search };
>	class dir { getattr mounton };
>	class dir mounton;
>	class filesystem mount;
>}
>
>require {
>	type default_t;
>	class dir { getattr search };
>	class dir { getattr mounton };
>
>}
>
>require {
>	type fusefs_t;
>	class dir mounton;
>	class dir search;
>	class filesystem mount;
>	class filesystem unmount;
>}
>
>require {
>	type tmp_t;
>	class dir add_name;
>	class dir create;
>	class dir remove_name;
>	class dir rmdir;
>	class dir search;
>	class dir write;
>	class file execute;
>	class file execute_no_trans;
>	class filesystem unmount;
>}
>
>require {
>	type mount_exec_t;
>	class dir remove_name;
>	class dir rmdir;
>	class file execute;
>	class file execute_no_trans;
>	class file read;
>}
>
>require {
>	type etc_t;
>	class capability dac_override;
>	class dir { write search };
>	class dir add_name;
>	class dir remove_name;
>	class file create;
>	class file getattr;
>	class file link;
>	class file write;
>	class file { write unlink };
>}
>
>require {
>	type etc_runtime_t;
>	class dir { write search };
>	class file { read write };
>	class file append;
>	class file getattr;
>}
>
>require {
>	type mount_t;
>	class capability dac_override;
>	class file { write unlink };
>}
>
>#============= mount_ntfs_t ==============
>allow mount_ntfs_t default_t:dir getattr;
>allow mount_ntfs_t default_t:dir mounton;
>allow mount_ntfs_t mnt_t:dir search;
>allow mount_ntfs_t mnt_t:dir getattr;
>allow mount_ntfs_t mnt_t:dir mounton;
>allow mount_ntfs_t fusefs_t:filesystem mount;
>allow mount_ntfs_t fusefs_t:filesystem unmount;
>allow mount_ntfs_t tmp_t:dir search;
>allow mount_ntfs_t tmp_t:dir write;
>allow mount_ntfs_t tmp_t:dir add_name;
>allow mount_ntfs_t tmp_t:dir create;
>allow mount_ntfs_t tmp_t:dir remove_name;
>allow mount_ntfs_t tmp_t:dir rmdir;
>allow mount_ntfs_t mount_exec_t:file execute;
>allow mount_ntfs_t mount_exec_t:file execute_no_trans;
>allow mount_ntfs_t mount_exec_t:file read;
>allow mount_ntfs_t etc_runtime_t:dir search;
>allow mount_ntfs_t etc_runtime_t:file getattr;
>allow mount_ntfs_t etc_runtime_t:file append;
>allow mount_ntfs_t etc_t:dir write;
>allow mount_ntfs_t etc_runtime_t:file { read write };
>allow mount_ntfs_t etc_t:dir add_name;
>allow mount_ntfs_t etc_t:file create;
>allow mount_ntfs_t etc_t:dir remove_name;
>allow mount_ntfs_t etc_t:file link;
>allow mount_ntfs_t etc_t:file unlink;
>allow mount_ntfs_t etc_t:file write;
>allow mount_ntfs_t self:capability dac_override;
>
>#============= mount_t ==============
>allow mount_t etc_t:file write;

Actions: View

Attachments on bug 249835: 160192