Add test module for SELinux interfaces

Signed-off-by: Hubert Quarantel-Colombani <[email protected]>
lhqg · Sep 14, 2023 · 166954c · 166954c
1 parent a51aa30
commit 166954c
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 2 deletions.
diff --git a/se_module/springboot.if b/se_module/springboot.if
@@ -215,14 +215,14 @@ interface(`springboot_systemd_deployer',`
 	allow	$1_t	springboot_unit_file_t:lnk_file	manage_lnk_file_perms
 
 	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	{ file lnk_file },	"springboot.service" )
-	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	{ file lnk_file},	"springboot.target" )
+	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	{ file lnk_file },	"springboot.target" )
 	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	dir,				"springboot.service.d" )
 	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	dir,				"springboot.target.d" )
 	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	dir,				"springboot.target.wants" )
 	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	file,				"[email protected]" )
 	filetrans_add_pattern($1_t,	systemd_unit_file_t,	springboot_unit_file_t,	dir,				"[email protected]" )
 
-	filetrans_add_pattern($1_t,	springboot_unit_file_t,	springboot_unit_file_t,	{ dir file lnk_file } )
+	#filetrans_add_pattern($1_t,	springboot_unit_file_t,	springboot_unit_file_t,	{ dir file lnk_file } )
 ')
 
 ########################################

diff --git a/se_module/test.te b/se_module/test.te
@@ -0,0 +1,16 @@
+policy_module(test, 0.0.1)
+
+type springboot_test1_t;
+type springboot_test2_t;
+type springboot_test3_t;
+type springboot_test4_t;
+type springboot_test5_t;
+
+springboot_monitor(springboot_test1)
+springboot_deployer(springboot_test2)
+springboot_systemd_deployer(springboot_test3)
+springboot_systemd_unit_instance_deployer(springboot_test4)
+springboot_auth_deployer(springboot_test5)
+
+springboot_allow_connectto(http)
+springboot_allow_consumed_service(ldap)