diff options
| author | Eric Paris | 2010-10-13 23:50:25 +0200 |
|---|---|---|
| committer | James Morris | 2010-10-21 01:12:58 +0200 |
| commit | cee74f47a6baba0ac457e87687fdcf0abd599f0a (patch) | |
| tree | 3d9fdb073050664e62d9cdb6c28112090cd138da /security/selinux/include/classmap.h | |
| parent | SELinux: drop useless (and incorrect) AVTAB_MAX_SIZE (diff) | |
| download | kernel-qcow2-linux-cee74f47a6baba0ac457e87687fdcf0abd599f0a.tar.gz kernel-qcow2-linux-cee74f47a6baba0ac457e87687fdcf0abd599f0a.tar.xz kernel-qcow2-linux-cee74f47a6baba0ac457e87687fdcf0abd599f0a.zip | |
SELinux: allow userspace to read policy back out of the kernel
There is interest in being able to see what the actual policy is that was
loaded into the kernel. The patch creates a new selinuxfs file
/selinux/policy which can be read by userspace. The actual policy that is
loaded into the kernel will be written back out to userspace.
Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/selinux/include/classmap.h')
| -rw-r--r-- | security/selinux/include/classmap.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/selinux/include/classmap.h b/security/selinux/include/classmap.h index b4c9eb4bd6f9..8858d2b2d4b6 100644 --- a/security/selinux/include/classmap.h +++ b/security/selinux/include/classmap.h @@ -17,7 +17,7 @@ struct security_class_mapping secclass_map[] = { { "compute_av", "compute_create", "compute_member", "check_context", "load_policy", "compute_relabel", "compute_user", "setenforce", "setbool", "setsecparam", - "setcheckreqprot", NULL } }, + "setcheckreqprot", "read_policy", NULL } }, { "process", { "fork", "transition", "sigchld", "sigkill", "sigstop", "signull", "signal", "ptrace", "getsched", "setsched", |