diff --git a/Changelog b/Changelog index 10713f2..6956ac9 100644 --- a/Changelog +++ b/Changelog @@ -1,3 +1,5 @@ +- Definitions for open permisson on file and similar objects from Eric + Paris. - Apt updates for ptys and logs, from Martin Orr. - RPC update from Vaclav Ovsik. - Exim updates on Debian from Devin Carrawy. diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors index b71dcbb..f7f181c 100644 --- a/policy/flask/access_vectors +++ b/policy/flask/access_vectors @@ -125,6 +125,7 @@ inherits file reparent search rmdir + open } class file @@ -133,6 +134,7 @@ inherits file execute_no_trans entrypoint execmod + open } class lnk_file @@ -144,16 +146,23 @@ inherits file execute_no_trans entrypoint execmod + open } class blk_file inherits file +{ + open +} class sock_file inherits file class fifo_file inherits file +{ + open +} class fd {