diff -up ./fapolicyd-selinux-0.4/fapolicyd.if.backport ./fapolicyd-selinux-0.4/fapolicyd.if --- ./fapolicyd-selinux-0.4/fapolicyd.if.backport 2021-03-23 10:21:31.000000000 +0100 +++ ./fapolicyd-selinux-0.4/fapolicyd.if 2021-07-20 17:38:51.266053356 +0200 @@ -2,6 +2,122 @@ ######################################## ## +## Watch_mount directories in /boot. +## +## +## +## Domain allowed access. +## +## +# + +ifndef(`files_watch_mount_boot_dirs',` + interface(`files_watch_mount_boot_dirs',` + gen_require(` + type boot_t; + ') + + allow $1 boot_t:dir watch_mount_dir_perms; + ') +') + + +######################################## +## +## Watch_mount home directories. +## +## +## +## Domain allowed access. +## +## +# + +ifndef(`files_watch_mount_home',` + interface(`files_watch_mount_home',` + gen_require(` + type home_root_t; + ') + + allow $1 home_root_t:dir watch_mount_dir_perms; + ') +') + + +######################################## +## +## Watch_with_perm home directories. +## +## +## +## Domain allowed access. +## +## +# + +ifndef(`files_watch_with_perm_home',` +interface(`files_watch_with_perm_home',` + gen_require(` + type home_root_t; + ') + + allow $1 home_root_t:dir watch_with_perm_dir_perms; +') +') + + +######################################## +## +## Watch_mount dirs on a DOS filesystem. +## +## +## +## Domain allowed access. +## +## +# + +ifndef(`fs_watch_mount_dos_dirs',` +interface(`fs_watch_mount_dos_dirs',` + gen_require(` + type dosfs_t; + ') + + watch_mount_dirs_pattern($1, dosfs_t, dosfs_t) +') +') + + + +######################################## +## +## Watch_with_perm dirs on a DOS filesystem. +## +## +## +## Domain allowed access. +## +## +# + +ifndef(`fs_watch_with_perm_dos_dirs',` +interface(`fs_watch_with_perm_dos_dirs',` + gen_require(` + type dosfs_t; + ') + + watch_with_perm_dirs_pattern($1, dosfs_t, dosfs_t) +') +') + + +################################################################################################### + + + + +######################################## +## ## Execute fapolicyd_exec_t in the fapolicyd domain. ## ## diff -up ./fapolicyd-selinux-0.4/fapolicyd.te.backport ./fapolicyd-selinux-0.4/fapolicyd.te --- ./fapolicyd-selinux-0.4/fapolicyd.te.backport 2021-07-20 17:31:12.161166538 +0200 +++ ./fapolicyd-selinux-0.4/fapolicyd.te 2021-07-20 17:31:12.162166524 +0200 @@ -1,5 +1,6 @@ policy_module(fapolicyd, 1.0.0) + ######################################## # # Declarations