diff --git a/policy/modules/system/selinuxutil.if b/policy/modules/system/selinuxutil.if index 6d87f29..5579a34 100644 --- a/policy/modules/system/selinuxutil.if +++ b/policy/modules/system/selinuxutil.if @@ -674,6 +674,27 @@ interface(`seutil_read_config',` allow $1 selinux_config_t:lnk_file { getattr read }; ') +######################################## +## +## Read and write the general SELinux configuration files. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`seutil_rw_config',` + gen_require(` + type selinux_config_t; + ') + + files_search_etc($1) + allow $1 selinux_config_t:dir list_dir_perms; + allow $1 selinux_config_t:file rw_file_perms; +') + ####################################### ## ## Create, read, write, and delete