diff --git a/refpolicy/policy/modules/system/libraries.if b/refpolicy/policy/modules/system/libraries.if index 64389a3..2832984 100644 --- a/refpolicy/policy/modules/system/libraries.if +++ b/refpolicy/policy/modules/system/libraries.if @@ -22,6 +22,23 @@ class file { getattr read execute }; ######################################## # +# libraries_legacy_use_dynamic_loader(domain,[`optional'] +# +define(`libraries_legacy_use_dynamic_loader',` +requires_block_template(libraries_legacy_use_dynamic_loader_depend,$2) +libraries_use_dynamic_loader($1,optional) +allow $1 ld_so_t:file execmod; +allow $1 ld_so_cache_t:file execute; +') + +define(`libraries_legacy_use_dynamic_loader_depend',` +libraries_use_dynamic_loader_depend +type ld_so_t, ld_so_cache_t; +class file { execute execmod }; +') + +######################################## +# # libraries_modify_dynamic_loader_cache(domain,[`optional'] # define(`libraries_modify_dynamic_loader_cache',` @@ -55,6 +72,22 @@ class file { getattr read execute }; ######################################## # +# libraries_legacy_read_shared_libraries(domain,[`optional'] +# +define(`libraries_legacy_read_shared_libraries',` +requires_block_template(libraries_legacy_read_shared_libraries_depend,$2) +libraries_read_shared_libraries($1,optional) +allow $1 { shlib_t texrel_shlib_t }:file execmod; +') + +define(`libraries_legacy_read_shared_libraries_depend',` +type shlib_t, texrel_shlib_t; +class file execmod; +libraries_read_shared_libraries_depend +') + +######################################## +# # libraries_read_static_libraries(domain,[`optional'] # define(`libraries_read_static_libraries',`