The selinux extend to the measument list could be written like 'measure func=FILE_CHECK mask=MAY_READ obj_type=my_app_t'. Where could I find document about the selinux extension ? For example, how many mask could there be? If I want to measuremnt some files after system on even no operations(no read or exec ops ) on these files, how to write the policy file ?
Thanks for your reply!
Thanks and regards,