Add interface devicekit_mounton_var_lib()

fedora-selinux · Aug 28, 2018 · 5bdee6f · 5bdee6f
1 parent 6e809e5
commit 5bdee6f
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/devicekit.if b/devicekit.if
@@ -433,3 +433,22 @@ interface(`devicekit_filetrans_named_content',`
 	logging_log_filetrans($1, devicekit_var_log_t, file, "pm-powersave.log")
 	logging_log_filetrans($1, devicekit_var_log_t, file, "pm-suspend.log")
 ')
+
+########################################
+
+## <summary>
+##	Mounton devicekit lib directory.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`devicekit_mounton_var_lib',`
+	gen_require(`
+		type devicekit_var_lib_t;
+	')
+
+	allow $1 devicekit_var_lib_t:dir mounton;
+')