On 2/4/20 8:44 AM, Stephen Smalley wrote:
On 1/30/20 2:07 PM, Richard Haines wrote:Test watch_sb and watch_mount permissions. The policy is contained in test_filesystem_notify.te as it can then be built if the policy supports the permissions. Signed-off-by: Richard Haines <richard_c_haines@xxxxxxxxxxxxxx>Tested with and without the watch permissions defined in base.cil and all_perms.spt; everything worked as expected.Acked-by: Stephen Smalley <sds@xxxxxxxxxxxxx>---
Applied.