|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# Authors: Stephen Smalley <sds@epoch.ncsc.mil> and Timothy Fraser
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
############################################
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# Device types
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# device_t is the type of /dev.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type device_t, file_type, mount_point, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# null_device_t is the type of /dev/null.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type null_device_t, device_type, dev_fs, mlstrustedobject;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# zero_device_t is the type of /dev/zero.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type zero_device_t, device_type, dev_fs, mlstrustedobject;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# console_device_t is the type of /dev/console.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type console_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# xconsole_device_t is the type of /dev/xconsole
|
|
Chris PeBenito |
31b7c0 |
type xconsole_device_t, file_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# memory_device_t is the type of /dev/kmem,
|
|
Chris PeBenito |
31b7c0 |
# /dev/mem, and /dev/port.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type memory_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# random_device_t is the type of /dev/random
|
|
Chris PeBenito |
31b7c0 |
# urandom_device_t is the type of /dev/urandom
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type random_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
type urandom_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# devtty_t is the type of /dev/tty.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type devtty_t, device_type, dev_fs, mlstrustedobject;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# tty_device_t is the type of /dev/*tty*
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type tty_device_t, serial_device, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# bsdpty_device_t is the type of /dev/[tp]ty[abcdepqrstuvwxyz][0-9a-f]
|
|
Chris PeBenito |
31b7c0 |
type bsdpty_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# usbtty_device_t is the type of /dev/usr/tty*
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type usbtty_device_t, serial_device, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# printer_device_t is the type for printer devices
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type printer_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# fixed_disk_device_t is the type of
|
|
Chris PeBenito |
31b7c0 |
# /dev/hd* and /dev/sd*.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type fixed_disk_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# scsi_generic_device_t is the type of /dev/sg*
|
|
Chris PeBenito |
31b7c0 |
# it gives access to ALL SCSI devices (both fixed and removable)
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type scsi_generic_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# removable_device_t is the type of
|
|
Chris PeBenito |
31b7c0 |
# /dev/scd* and /dev/fd*.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type removable_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# clock_device_t is the type of
|
|
Chris PeBenito |
31b7c0 |
# /dev/rtc.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type clock_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# tun_tap_device_t is the type of /dev/net/tun/* and /dev/net/tap/*
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type tun_tap_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# misc_device_t is the type of miscellaneous devices.
|
|
Chris PeBenito |
31b7c0 |
# XXX: FIXME! Appropriate access to these devices need to be identified.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type misc_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# A more general type for mouse devices.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type mouse_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# For generic /dev/input/event* event devices
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type event_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# Not sure what these devices are for, but X wants access to them.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
type agp_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
type dri_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for sound devices.
|
|
Chris PeBenito |
31b7c0 |
type sound_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for /dev/ppp.
|
|
Chris PeBenito |
31b7c0 |
type ppp_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for frame buffer /dev/fb/*
|
|
Chris PeBenito |
31b7c0 |
type framebuf_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for /dev/.devfsd
|
|
Chris PeBenito |
31b7c0 |
type devfs_control_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for /dev/cpu/mtrr and /proc/mtrr
|
|
Chris PeBenito |
31b7c0 |
type mtrr_device_t, device_type, dev_fs, proc_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for /dev/pmu
|
|
Chris PeBenito |
31b7c0 |
type power_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for /dev/apm_bios
|
|
Chris PeBenito |
31b7c0 |
type apm_bios_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# Type for v4l
|
|
Chris PeBenito |
31b7c0 |
type v4l_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# tape drives
|
|
Chris PeBenito |
31b7c0 |
type tape_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# scanners
|
|
Chris PeBenito |
31b7c0 |
type scanner_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# cpu control devices /dev/cpu/0/*
|
|
Chris PeBenito |
31b7c0 |
type cpu_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# for other device nodes such as the NVidia binary-only driver
|
|
Chris PeBenito |
31b7c0 |
type xserver_misc_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# for the IBM zSeries z90crypt hardware ssl accelorator
|
|
Chris PeBenito |
31b7c0 |
type crypt_device_t, device_type, dev_fs;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
|