Blame policy/modules/apps/ptchown.te
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
policy_module(ptchown, 1.0.0)
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
########################################
|
|
Chris PeBenito |
aac56b |
#
|
|
Chris PeBenito |
aac56b |
# Declarations
|
|
Chris PeBenito |
aac56b |
#
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
type ptchown_t;
|
|
Chris PeBenito |
aac56b |
type ptchown_exec_t;
|
|
Chris PeBenito |
aac56b |
application_domain(ptchown_t, ptchown_exec_t)
|
|
Chris PeBenito |
aac56b |
role system_r types ptchown_t;
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
########################################
|
|
Chris PeBenito |
aac56b |
#
|
|
Chris PeBenito |
aac56b |
# ptchown local policy
|
|
Chris PeBenito |
aac56b |
#
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
allow ptchown_t self:capability { chown fowner fsetid setuid };
|
|
Chris PeBenito |
aac56b |
allow ptchown_t self:process { getcap setcap };
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
files_read_etc_files(ptchown_t)
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
fs_rw_anon_inodefs_files(ptchown_t)
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
term_setattr_generic_ptys(ptchown_t)
|
|
Chris PeBenito |
aac56b |
term_setattr_all_user_ptys(ptchown_t)
|
|
Chris PeBenito |
aac56b |
term_use_generic_ptys(ptchown_t)
|
|
Chris PeBenito |
aac56b |
term_use_ptmx(ptchown_t)
|
|
Chris PeBenito |
aac56b |
|
|
Chris PeBenito |
aac56b |
miscfiles_read_localization(ptchown_t)
|