Chris PeBenito de8af9
Chris PeBenito f50856
policy_module(alsa,1.3.1)
Chris PeBenito de8af9
Chris PeBenito de8af9
########################################
Chris PeBenito de8af9
#
Chris PeBenito de8af9
# Declarations
Chris PeBenito de8af9
#
Chris PeBenito de8af9
Chris PeBenito de8af9
type alsa_t;
Chris PeBenito de8af9
type alsa_exec_t;
Chris PeBenito f50856
init_system_domain(alsa_t, alsa_exec_t)
Chris PeBenito de8af9
role system_r types alsa_t;
Chris PeBenito de8af9
Chris PeBenito de8af9
type alsa_etc_rw_t;
Chris PeBenito de8af9
files_type(alsa_etc_rw_t)
Chris PeBenito de8af9
Chris PeBenito f50856
type alsa_var_lib_t;
Chris PeBenito f50856
files_type(alsa_var_lib_t)
Chris PeBenito f50856
Chris PeBenito de8af9
########################################
Chris PeBenito de8af9
#
Chris PeBenito de8af9
# Local policy
Chris PeBenito de8af9
#
Chris PeBenito de8af9
Chris PeBenito 495df4
allow alsa_t self:capability { dac_read_search dac_override setgid setuid ipc_owner };
Chris PeBenito de8af9
dontaudit alsa_t self:capability sys_admin;
Chris PeBenito de8af9
allow alsa_t self:sem create_sem_perms;
Chris PeBenito de8af9
allow alsa_t self:shm create_shm_perms;
Chris PeBenito de8af9
allow alsa_t self:unix_stream_socket create_stream_socket_perms;
Chris PeBenito de8af9
allow alsa_t self:unix_dgram_socket create_socket_perms;
Chris PeBenito de8af9
Chris PeBenito f50856
manage_files_pattern(alsa_t, alsa_etc_rw_t, alsa_etc_rw_t)
Chris PeBenito f50856
manage_lnk_files_pattern(alsa_t, alsa_etc_rw_t, alsa_etc_rw_t)
Chris PeBenito 495df4
files_etc_filetrans(alsa_t, alsa_etc_rw_t, file)
Chris PeBenito de8af9
Chris PeBenito f50856
can_exec(alsa_t, alsa_exec_t)
Chris PeBenito f50856
Chris PeBenito f50856
manage_dirs_pattern(alsa_t, alsa_var_lib_t, alsa_var_lib_t)
Chris PeBenito f50856
manage_files_pattern(alsa_t, alsa_var_lib_t, alsa_var_lib_t)
Chris PeBenito f50856
files_search_var_lib(alsa_t)
Chris PeBenito f50856
Chris PeBenito 495df4
kernel_read_system_state(alsa_t)
Chris PeBenito 495df4
Chris PeBenito 495df4
dev_read_sound(alsa_t)
Chris PeBenito 495df4
dev_write_sound(alsa_t)
Chris PeBenito de8af9
Chris PeBenito f50856
corecmd_exec_bin(alsa_t)
Chris PeBenito f50856
Chris PeBenito 495df4
files_search_home(alsa_t)
Chris PeBenito 495df4
files_read_etc_files(alsa_t)
Chris PeBenito de8af9
Chris PeBenito f50856
auth_use_nsswitch(alsa_t)
Chris PeBenito f50856
Chris PeBenito de8af9
libs_use_ld_so(alsa_t)
Chris PeBenito de8af9
libs_use_shared_libs(alsa_t)
Chris PeBenito de8af9
Chris PeBenito de8af9
logging_send_syslog_msg(alsa_t)
Chris PeBenito de8af9
Chris PeBenito de8af9
miscfiles_read_localization(alsa_t)
Chris PeBenito de8af9
Chris PeBenito de8af9
userdom_manage_unpriv_user_semaphores(alsa_t)
Chris PeBenito de8af9
userdom_manage_unpriv_user_shared_mem(alsa_t)
Chris PeBenito 495df4
userdom_search_generic_user_home_dirs(alsa_t)
Chris PeBenito f50856
userdom_dontaudit_search_sysadm_home_dirs(alsa_t)
Chris PeBenito 495df4
Chris PeBenito 495df4
optional_policy(`
Chris PeBenito 495df4
	hal_use_fds(alsa_t)
Chris PeBenito 495df4
	hal_write_log(alsa_t)
Chris PeBenito 495df4
')