commit 79e084fcc9a44a79646114021539ca7398110cc3
author Stephen Smalley <sds@tycho.nsa.gov> Tue Aug 27 09:16:47 2013 -0400
committer Stephen Smalley <sds@tycho.nsa.gov> Tue Sep 10 11:09:15 2013 -0400
tree d0d82fc226159d7bcfd05d68c327d8dddc6e1c56
parent 9af6f1bd59ee2fb0622db8ff25c4806c5527a0b3

Allow access to /data/security/current symbolic link.

Change-Id: Ic500af7b9dac6a9b6401e99c3d162913e9989d9b
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

te_macros

diff --git a/te_macros b/te_macros
index 310612c..283c4a3 100644
--- a/te_macros
+++ b/te_macros
@@ -239,7 +239,7 @@
 define(`security_access_policy', `
 allow $1 security_file:dir r_dir_perms;
 allow $1 security_file:file r_file_perms;
-allow $1 security_file:lnk_file read;
+allow $1 security_file:lnk_file r_file_perms;
 allow $1 selinuxfs:dir r_dir_perms;
 allow $1 selinuxfs:file r_file_perms;
 allow $1 rootfs:dir r_dir_perms;
@@ -259,6 +259,7 @@
 unix_socket_connect($1, property, init)
 allow $1 security_file:dir create_dir_perms;
 allow $1 security_file:file create_file_perms;
+allow $1 security_file:lnk_file { create rename unlink };
 allow $1 security_prop:property_service set;
 ')
 
@@ -271,6 +272,7 @@
 unix_socket_connect($1, property, init)
 allow $1 security_file:dir create_dir_perms;
 allow $1 security_file:file create_file_perms;
+allow $1 security_file:lnk_file { create rename unlink };
 allow $1 security_prop:property_service set;
 ')