Shouldn't this have search_dir_perms to add in getattr?
######################################## ## <summary> ## Search directories on a NFS filesystem. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`fs_search_nfs',` gen_require(` type nfs_t; ')
allow $1 nfs_t:dir search; ')
This is from RHEL5.1. There are no other interfaces to add getattr unless I want to move to full read access with fs_list_nfs.
selinux@lists.fedoraproject.org