]> git.ipfire.org Git - people/stevee/selinux-policy.git/commitdiff
add snmp_read_snmp_var_lib_dirs() interface
authorMiroslav Grepl <mgrepl@redhat.com>
Tue, 29 Nov 2011 15:54:37 +0000 (16:54 +0100)
committerMiroslav Grepl <mgrepl@redhat.com>
Tue, 29 Nov 2011 15:54:37 +0000 (16:54 +0100)
policy/modules/services/snmp.if

index ad10bef04c65a075e99ac40aeb29c61ef6bb5da2..f1343b7c2268089bf74db93994ebc8775e86a427 100644 (file)
@@ -68,6 +68,25 @@ interface(`snmp_read_snmp_var_lib_files',`
        read_lnk_files_pattern($1, snmpd_var_lib_t, snmpd_var_lib_t)
 ')
 
+#######################################
+## <summary>
+##  Read snmpd libraries directories
+## </summary>
+## <param name="domain">
+##  <summary>
+##  Domain allowed access.
+##  </summary>
+## </param>
+#
+interface(`snmp_read_snmp_var_lib_dirs',`
+    gen_require(`
+        type snmpd_var_lib_t;
+    ')
+
+    files_search_var_lib($1)
+    allow $1 snmpd_var_lib_t:dir list_dir_perms;
+')
+
 ########################################
 ## <summary>
 ##     Manage snmpd libraries directories