#DESC lcd - program for Cobalt LCD device

#

# Author:  Russell Coker <russell@coker.com.au>

#

#################################

#

# Rules for the lcd_t domain.

#

# lcd_t is the domain for the lcd program.

# lcd_exec_t is the type of the corresponding program.

#

type lcd_t, domain, privlog;

role sysadm_r types lcd_t;

role system_r types lcd_t;

uses_shlib(lcd_t)

type lcd_exec_t, file_type, sysadmfile, exec_type;

type lcd_device_t, file_type;

# Transition into this domain when you run this program.

domain_auto_trans(initrc_t, lcd_exec_t, lcd_t)

domain_auto_trans(sysadm_t, lcd_exec_t, lcd_t)

allow lcd_t lcd_device_t:chr_file rw_file_perms;

# for /etc/locks/.lcd_lock

lock_domain(lcd)

allow lcd_t etc_t:lnk_file read;

allow lcd_t var_t:dir search;

# Access the terminal.

allow lcd_t admin_tty_type:chr_file rw_file_perms;

ifdef(`gnome-pty-helper.te', `allow lcd_t sysadm_gph_t:fd use;')

allow lcd_t privfd:fd use;