diff --git a/policy/modules/kernel/filesystem.if b/policy/modules/kernel/filesystem.if index eb723b4..aa52f45 100644 --- a/policy/modules/kernel/filesystem.if +++ b/policy/modules/kernel/filesystem.if @@ -169,15 +169,30 @@ interface(`fs_unmount_xattr_fs',` ######################################## ## -## Get the attributes of a persistent -## filesystem which has extended +## Get the attributes of persistent +## filesystems which have extended ## attributes, such as ext3, JFS, or XFS. ## +## +##

+## Allow the specified domain to +## get the attributes of a persistent +## filesystems which have extended +## attributes, such as ext3, JFS, or XFS. +## Example attributes: +##

+## +##
## ## ## Domain allowed access. ## ## +## ## # interface(`fs_getattr_xattr_fs',` @@ -407,11 +422,19 @@ interface(`fs_getattr_autofs',` ## Search automount filesystem to use automatically ## mounted filesystems. ## +## +## Allow the specified domain to search mount points +## that have filesystems that are mounted by +## the automount service. Generally this will +## be required for any domain that accesses objects +## on these filesystems. +## ## ## ## Domain allowed access. ## ## +## # interface(`fs_search_auto_mountpoints',` gen_require(` @@ -3837,14 +3860,26 @@ interface(`fs_unmount_all_fs',` ######################################## ## -## Get the attributes of all persistent -## filesystems. +## Get the attributes of all filesystems. ## +## +##

+## Allow the specified domain to +## et the attributes of all filesystems. +## Example attributes: +##

+##
    +##
  • Type of the file system (e.g., ext3)
  • +##
  • Size of the file system
  • +##
  • Available space on the file system
  • +##
+##
## ## ## Domain allowed access. ## ## +## ## # interface(`fs_getattr_all_fs',`