summaryrefslogtreecommitdiff
path: root/src/fs/noseclabelfs/fusenoseclabelfs.cil
diff options
context:
space:
mode:
authorDominick Grift <dominick.grift@defensec.nl>2023-08-20 15:44:41 +0200
committerDominick Grift <dominick.grift@defensec.nl>2023-08-20 15:46:23 +0200
commit0c187b6ff97f91c41dab65a6426dc61f77305cdf (patch)
tree1e35f5851154500a8a39428a45a5671f9488e1da /src/fs/noseclabelfs/fusenoseclabelfs.cil
downloadselinux-policy-0c187b6ff97f91c41dab65a6426dc61f77305cdf.tar.gz
Import dssp5
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Diffstat (limited to 'src/fs/noseclabelfs/fusenoseclabelfs.cil')
-rw-r--r--src/fs/noseclabelfs/fusenoseclabelfs.cil16
1 files changed, 16 insertions, 0 deletions
diff --git a/src/fs/noseclabelfs/fusenoseclabelfs.cil b/src/fs/noseclabelfs/fusenoseclabelfs.cil
new file mode 100644
index 0000000..b2ac9fc
--- /dev/null
+++ b/src/fs/noseclabelfs/fusenoseclabelfs.cil
@@ -0,0 +1,16 @@
+;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-License-Identifier: Unlicense
+
+(in fuse
+
+ (genfscon "fuse" "/" fs_context)
+ (genfscon "fuseblk" "/" fs_context)
+ (genfscon "fusectl" "/" fs_context)
+
+ (macro map_fs_files ((type ARG1))
+ (allow ARG1 fs (file (map))))
+
+ (blockinherit .fs.macro_template_lnk_files)
+ (blockinherit .noseclabelfs.template)
+
+ (call .rbacsep.exempt.obj.type (fs)))