SELinux Policy Macros

参考：http://selinuxproject.org/page/NB_RefPolicy

Directory Macros

macro	expansion
getattr_dir_perms	getattr
setattr_dir_perms	setattr
search_dir_perms	getattr search open
list_dir_perms	getattr search open read lock ioctl
add_entry_dir_perms	getattr search open lock ioctl write add_name
del_entry_dir_perms	getattr search open lock ioctl write remove_name
rw_dir_perms	open read getattr lock search ioctl add_name remove_name write
create_dir_perms	getattr create
rename_dir_perms	getattr rename
delete_dir_perms	getattr rmdir
manage_dir_perms	create open getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl
relabelfrom_dir_perms	getattr relabelfrom
relabelto_dir_perms	getattr relabelto
relabel_dir_perms	getattr relabelfrom relabelto

File macros 

macro	expansion
getattr_file_perms	getattr
setattr_file_perms	setattr
read_file_perms	getattr open read lock ioctl
mmap_file_perms	getattr open read execute ioctl
exec_file_perms	getattr open read execute ioctl execute_no_trans
append_file_perms	getattr open append lock ioctl
write_file_perms	getattr open write append lock ioctl
rw_file_perms	getattr open read write append ioctl lock
create_file_perms	getattr create open
rename_file_perms	getattr rename
delete_file_perms	getattr unlink
manage_file_perms	create open getattr setattr read write append rename link unlink ioctl lock
relabelfrom_file_perms	getattr relabelfrom
relabelto_file_perms	getattr relabelto
relabel_file_perms	getattr relabelfrom relabelto