Hi, There is an interface for read_files_pattern, manage_files_pattern, manage_dirs_pattern, but no "read_dirs_pattern". Why not add this to policy/support/file_pattrns.spt such as: define(`read_dirs_pattern',` search_dirs_pattern($1, $2, $3) getattr_dirs_pattern($1, $2, $3) list_dirs_pattern($1, $2, $3) ') This would be useful for "consistency" of the interfaces when writing policy. Sincerely, -- William Brown <william@xxxxxxxxxxxxxxx> -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux