Allow coreos-installer-generator manage mdadm_conf_t files

Resolves: RHEL-38614
fedora-selinux · Aug 30, 2024 · 3e53e58 · 3e53e58
1 parent 45da5e7
commit 3e53e58
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/policy/modules/contrib/coreos_installer.te b/policy/modules/contrib/coreos_installer.te
@@ -75,6 +75,8 @@ optional_policy(`
 ')
 
 optional_policy(`
+	raid_create_conf_dirs(coreos_installer_generator_t)
+	raid_manage_conf_files(coreos_installer_generator_t)
 	raid_filetrans_named_content(coreos_installer_generator_t)
 ')
 

diff --git a/policy/modules/contrib/raid.if b/policy/modules/contrib/raid.if
@@ -172,6 +172,24 @@ interface(`raid_manage_conf_files',`
     manage_files_pattern($1, mdadm_conf_t, mdadm_conf_t)
 ')
 
+########################################
+## <summary>
+##	Create mdadm config dirs.
+## </summary>
+## <param name="domain">
+##	<summary>
+##      Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`raid_create_conf_dirs',`
+	gen_require(`
+		type mdadm_conf_t;
+	')
+
+    allow $1 mdadm_conf_t:dir create_dir_perms;
+')
+
 ########################################
 ## <summary>
 ##	Transition to mdadm named content