diff --git a/policy/modules/kernel/filesystem.if b/policy/modules/kernel/filesystem.if index eb723b4..aa52f45 100644 --- a/policy/modules/kernel/filesystem.if +++ b/policy/modules/kernel/filesystem.if @@ -169,15 +169,30 @@ interface(`fs_unmount_xattr_fs',` ######################################## ## <summary> -## Get the attributes of a persistent -## filesystem which has extended +## Get the attributes of persistent +## filesystems which have extended ## attributes, such as ext3, JFS, or XFS. ## </summary> +## <desc> +## <p> +## Allow the specified domain to +## get the attributes of a persistent +## filesystems which have extended +## attributes, such as ext3, JFS, or XFS. +## Example attributes: +## </p> +## <ul> +## <li>Type of the file system (e.g., ext3)</li> +## <li>Size of the file system</li> +## <li>Available space on the file system</li> +## </ul> +## </desc> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> +## <infoflow type="read" weight="5"/> ## <rolecap/> # interface(`fs_getattr_xattr_fs',` @@ -407,11 +422,19 @@ interface(`fs_getattr_autofs',` ## Search automount filesystem to use automatically ## mounted filesystems. ## </summary> +## <desc> +## Allow the specified domain to search mount points +## that have filesystems that are mounted by +## the automount service. Generally this will +## be required for any domain that accesses objects +## on these filesystems. +## </desc> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> +## <infoflow type="read" weight="5"/> # interface(`fs_search_auto_mountpoints',` gen_require(` @@ -3837,14 +3860,26 @@ interface(`fs_unmount_all_fs',` ######################################## ## <summary> -## Get the attributes of all persistent -## filesystems. +## Get the attributes of all filesystems. ## </summary> +## <desc> +## <p> +## Allow the specified domain to +## et the attributes of all filesystems. +## Example attributes: +## </p> +## <ul> +## <li>Type of the file system (e.g., ext3)</li> +## <li>Size of the file system</li> +## <li>Available space on the file system</li> +## </ul> +## </desc> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> +## <infoflow type="read" weight="5"/> ## <rolecap/> # interface(`fs_getattr_all_fs',`