Blame policy/modules/admin/dmesg.if
|
Chris PeBenito |
c22038 |
## <summary>Policy for dmesg.</summary>
|
|
Chris PeBenito |
c22038 |
|
|
Chris PeBenito |
c22038 |
########################################
|
|
Chris PeBenito |
50aca6 |
## <summary>
|
|
Chris PeBenito |
414e41 |
## Execute dmesg in the dmesg domain.
|
|
Chris PeBenito |
50aca6 |
## </summary>
|
|
Chris PeBenito |
414e41 |
## <param name="domain">
|
|
Chris PeBenito |
885b83 |
## <summary>
|
|
Dominick Grift |
77e4b5 |
## Domain allowed to transition.
|
|
Chris PeBenito |
885b83 |
## </summary>
|
|
Chris PeBenito |
414e41 |
## </param>
|
|
Chris PeBenito |
c22038 |
#
|
|
Chris PeBenito |
199895 |
interface(`dmesg_domtrans',`
|
|
Chris PeBenito |
350b6a |
gen_require(`
|
|
Chris PeBenito |
350b6a |
type dmesg_t, dmesg_exec_t;
|
|
Chris PeBenito |
9e9138 |
')
|
|
Chris PeBenito |
350b6a |
|
|
Chris PeBenito |
350b6a |
corecmd_search_bin($1)
|
|
Chris PeBenito |
350b6a |
domtrans_pattern($1, dmesg_exec_t, dmesg_t)
|
|
Chris PeBenito |
c22038 |
')
|
|
Chris PeBenito |
c22038 |
|
|
Chris PeBenito |
c22038 |
########################################
|
|
Chris PeBenito |
50aca6 |
## <summary>
|
|
Chris PeBenito |
414e41 |
## Execute dmesg in the caller domain.
|
|
Chris PeBenito |
50aca6 |
## </summary>
|
|
Chris PeBenito |
414e41 |
## <param name="domain">
|
|
Chris PeBenito |
885b83 |
## <summary>
|
|
Chris PeBenito |
a72e42 |
## Domain allowed access.
|
|
Chris PeBenito |
885b83 |
## </summary>
|
|
Chris PeBenito |
414e41 |
## </param>
|
|
Chris PeBenito |
bbcd3c |
## <rolecap/>
|
|
Chris PeBenito |
c22038 |
#
|
|
Chris PeBenito |
199895 |
interface(`dmesg_exec',`
|
|
Chris PeBenito |
350b6a |
gen_require(`
|
|
Chris PeBenito |
350b6a |
type dmesg_exec_t;
|
|
Chris PeBenito |
9e9138 |
')
|
|
Chris PeBenito |
350b6a |
|
|
Chris PeBenito |
350b6a |
corecmd_search_bin($1)
|
|
Chris PeBenito |
0bfccd |
can_exec($1, dmesg_exec_t)
|
|
Chris PeBenito |
c22038 |
')
|