From 210607be61a1dd14460ee92799d58ac37c4da46a Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Mar 04 2008 20:19:29 +0000
Subject: trunk: Definitions for open permisson on file and similar objects from Eric Paris.


---

diff --git a/Changelog b/Changelog
index 10713f2..6956ac9 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,5 @@
+- Definitions for open permisson on file and similar objects from Eric
+  Paris.
 - Apt updates for ptys and logs, from Martin Orr.
 - RPC update from Vaclav Ovsik.
 - Exim updates on Debian from Devin Carrawy.
diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index b71dcbb..f7f181c 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -125,6 +125,7 @@ inherits file
 	reparent
 	search
 	rmdir
+	open
 }
 
 class file
@@ -133,6 +134,7 @@ inherits file
 	execute_no_trans
 	entrypoint
 	execmod
+	open
 }
 
 class lnk_file
@@ -144,16 +146,23 @@ inherits file
 	execute_no_trans
 	entrypoint
 	execmod
+	open
 }
 
 class blk_file
 inherits file
+{
+	open
+}
 
 class sock_file
 inherits file
 
 class fifo_file
 inherits file
+{
+	open
+}
 
 class fd
 {