fs_search_nfs lacks getattr

Clarkson, Mike R (US SSA) mike.clarkson at baesystems.com
Thu May 29 20:15:26 UTC 2008


Shouldn't this have search_dir_perms to add in getattr?

########################################
## <summary>
##	Search directories on a NFS filesystem.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`fs_search_nfs',`
	gen_require(`
		type nfs_t;
	')

	allow $1 nfs_t:dir search;
')

This is from RHEL5.1. There are no other interfaces to add getattr
unless I want to move to full read access with fs_list_nfs.





More information about the fedora-selinux-list mailing list