@@ -, +, @@ cifs filesystems. --- policy/modules/admin/portage.te | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) --- a/policy/modules/admin/portage.te +++ a/policy/modules/admin/portage.te @@ -13,6 +13,14 @@ policy_module(portage) ## gen_tunable(portage_use_nfs, false) +## +##

+## Determine whether portage can +## use cifs filesystems. +##

+##
+gen_tunable(portage_use_cifs, false) + ## ##

## Determine whether portage domains can read user content. @@ -148,6 +156,10 @@ tunable_policy(`portage_use_nfs',` fs_read_nfs_files(gcc_config_t) ') +tunable_policy(`portage_use_cifs',` + fs_read_cifs_files(gcc_config_t) +') + optional_policy(` consoletype_exec(gcc_config_t) ') @@ -340,6 +352,13 @@ tunable_policy(`portage_use_nfs',` fs_manage_nfs_symlinks(portage_fetch_t) ') +tunable_policy(`portage_use_cifs',` + fs_getattr_cifs(portage_fetch_t) + fs_manage_cifs_dirs(portage_fetch_t) + fs_manage_cifs_files(portage_fetch_t) + fs_manage_cifs_symlinks(portage_fetch_t) +') + tunable_policy(`portage_read_user_content',` userdom_read_user_home_content_files(portage_fetch_t) userdom_list_user_home_content(portage_fetch_t) --