Chris PeBenito 17ec8c
policy_module(dmesg, 1.3.0)
Chris PeBenito c22038
Chris PeBenito c22038
########################################
Chris PeBenito c22038
#
Chris PeBenito c22038
# Declarations
Chris PeBenito c22038
#
Chris PeBenito c22038
Chris PeBenito 350b6a
type dmesg_t;
Chris PeBenito 350b6a
type dmesg_exec_t;
Chris PeBenito 0bfccd
init_system_domain(dmesg_t, dmesg_exec_t)
Chris PeBenito 6f81e1
Chris PeBenito c22038
########################################
Chris PeBenito c22038
#
Chris PeBenito c22038
# Local policy
Chris PeBenito c22038
#
Chris PeBenito c22038
Chris PeBenito 350b6a
allow dmesg_t self:capability sys_admin;
Chris PeBenito 350b6a
dontaudit dmesg_t self:capability sys_tty_config;
Chris PeBenito c22038
Chris PeBenito 350b6a
allow dmesg_t self:process signal_perms;
Chris PeBenito c22038
Chris PeBenito 350b6a
kernel_read_kernel_sysctls(dmesg_t)
Chris PeBenito 350b6a
kernel_read_ring_buffer(dmesg_t)
Chris PeBenito 350b6a
kernel_clear_ring_buffer(dmesg_t)
Chris PeBenito 350b6a
kernel_change_ring_buffer_level(dmesg_t)
Chris PeBenito 350b6a
kernel_list_proc(dmesg_t)
Chris PeBenito 350b6a
kernel_read_proc_symlinks(dmesg_t)
Chris PeBenito c22038
Chris PeBenito 350b6a
dev_read_sysfs(dmesg_t)
Chris PeBenito ab940a
Chris PeBenito 350b6a
fs_search_auto_mountpoints(dmesg_t)
Chris PeBenito ab940a
Chris PeBenito 350b6a
term_dontaudit_use_console(dmesg_t)
Chris PeBenito c22038
Chris PeBenito 350b6a
domain_use_interactive_fds(dmesg_t)
Chris PeBenito c22038
Chris PeBenito 350b6a
files_list_etc(dmesg_t)
Chris PeBenito 350b6a
# for when /usr is not mounted:
Chris PeBenito 350b6a
files_dontaudit_search_isid_type_dirs(dmesg_t)
Chris PeBenito d490eb
Chris PeBenito 350b6a
init_use_fds(dmesg_t)
Chris PeBenito 350b6a
init_use_script_ptys(dmesg_t)
Chris PeBenito c22038
Chris PeBenito 350b6a
logging_send_syslog_msg(dmesg_t)
Chris PeBenito 350b6a
logging_write_generic_logs(dmesg_t)
Chris PeBenito c22038
Chris PeBenito 350b6a
miscfiles_read_localization(dmesg_t)
Chris PeBenito c22038
Chris PeBenito 350b6a
userdom_dontaudit_use_unpriv_user_fds(dmesg_t)
Chris PeBenito 296273
userdom_use_user_terminals(dmesg_t)
Chris PeBenito e9c6cd
Chris PeBenito 350b6a
optional_policy(`
Dan Walsh 2968e0
	abrt_cache_append(dmesg_t)
Dan Walsh 3eaa99
	abrt_rw_fifo_file(dmesg_t)
Dan Walsh 3eaa99
	abrt_manage_pid_files(dmesg_t)
Dan Walsh 3eaa99
')
Dan Walsh 3eaa99
Dan Walsh 3eaa99
optional_policy(`
Chris PeBenito 350b6a
	seutil_sigchld_newrole(dmesg_t)
Chris PeBenito 350b6a
')
Chris PeBenito c22038
Chris PeBenito 350b6a
optional_policy(`
Chris PeBenito 350b6a
	udev_read_db(dmesg_t)
Chris PeBenito c22038
')