Chris PeBenito 4bf4ed
## <summary>Policy for terminals.</summary>
Chris PeBenito fb0a3a
## <required val="true">
Chris PeBenito fb0a3a
##	Depended on by other required modules.
Chris PeBenito fb0a3a
## </required>
Chris PeBenito e181fe
Chris PeBenito b4cd15
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Transform specified type into a pty type.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="pty_type">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 414e41
##	An object type that will applied to a pty.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito b4cd15
#
Chris PeBenito 199895
interface(`term_pty',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ptynode;
Chris PeBenito a7c3a1
		type devpts_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Chris PeBenito f1be09
	dev_node($1)
Chris PeBenito 0c73cd
	allow $1 devpts_t:filesystem associate;
Chris PeBenito 0c73cd
	typeattribute $1 ptynode;
Chris PeBenito b16c6b
')
Chris PeBenito b16c6b
Chris PeBenito b16c6b
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Transform specified type into an user
Chris PeBenito 414e41
##	pty type. This allows it to be relabeled via
Chris PeBenito 414e41
##	type change by login programs such as ssh.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="userdomain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 414e41
##	The type of the user domain associated with
Chris PeBenito 414e41
##	this pty.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 414e41
## <param name="object_type">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 414e41
##	An object type that will applied to a pty.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito b16c6b
#
Chris PeBenito 199895
interface(`term_user_pty',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute server_ptynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Chris PeBenito 2a3478
	term_pty($2)
Chris PeBenito 1e786e
	type_change $1 server_ptynode:chr_file $2;
Chris PeBenito b16c6b
')
Chris PeBenito b16c6b
Chris PeBenito b16c6b
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Transform specified type into a pty type
Chris PeBenito 414e41
##	used by login programs, such as sshd.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="pty_type">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 414e41
##	An object type that will applied to a pty.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 0404a3
#
Chris PeBenito 199895
interface(`term_login_pty',`
Chris PeBenito 0404a3
	gen_require(`
Chris PeBenito 0404a3
		attribute server_ptynode;
Chris PeBenito 0404a3
	')
Chris PeBenito 0404a3
Chris PeBenito 0404a3
	term_pty($1)
Chris PeBenito 0404a3
	typeattribute $1 server_ptynode;
Chris PeBenito 0404a3
')
Chris PeBenito 0404a3
Chris PeBenito 0404a3
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Transform specified type into a tty type.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="tty_type">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 414e41
##	An object type that will applied to a tty.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito b16c6b
#
Chris PeBenito 199895
interface(`term_tty',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito ef5ca0
		attribute ttynode, serial_device;
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Chris PeBenito aeaae5
	typeattribute $1 ttynode, serial_device;
Chris PeBenito aeaae5
Chris PeBenito f1be09
	dev_node($1)
Chris PeBenito aeaae5
')
Chris PeBenito aeaae5
Chris PeBenito aeaae5
########################################
Chris PeBenito aeaae5
## <summary>
Chris PeBenito aeaae5
##	Transform specified type into a user tty type.
Chris PeBenito aeaae5
## </summary>
Chris PeBenito aeaae5
## <param name="domain">
Chris PeBenito aeaae5
##	<summary>
Chris PeBenito aeaae5
##	User domain that is related to this tty.
Chris PeBenito aeaae5
##	</summary>
Chris PeBenito aeaae5
## </param>
Chris PeBenito aeaae5
## <param name="tty_type">
Chris PeBenito aeaae5
##	<summary>
Chris PeBenito aeaae5
##	An object type that will applied to a tty.
Chris PeBenito aeaae5
##	</summary>
Chris PeBenito aeaae5
## </param>
Chris PeBenito aeaae5
#
Chris PeBenito aeaae5
interface(`term_user_tty',`
Chris PeBenito aeaae5
	gen_require(`
Chris PeBenito aeaae5
		attribute ttynode;
Chris PeBenito aeaae5
		type tty_device_t;
Chris PeBenito aeaae5
	')
Chris PeBenito 0c73cd
Chris PeBenito aeaae5
	term_tty($2)
Chris PeBenito aeaae5
Chris PeBenito aeaae5
	type_change $1 tty_device_t:chr_file $2;
Chris PeBenito 30705b
Chris PeBenito 0c73cd
	# Debian login is from shadow utils and does not allow resetting the perms.
Chris PeBenito 0c73cd
	# have to fix this!
Chris PeBenito 254bbc
	ifdef(`distro_debian',`
Chris PeBenito a7c3a1
		type_change $1 ttynode:chr_file $2;
Chris PeBenito 0c73cd
	')
Chris PeBenito b16c6b
')
Chris PeBenito b16c6b
Chris PeBenito b16c6b
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Create a pty in the /dev/pts directory.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 414e41
##	The type of the process creating the pty.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 414e41
## <param name="pty_type">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 414e41
##	The type of the pty.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito b16c6b
#
Chris PeBenito 199895
interface(`term_create_pty',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type bsdpty_device_t, devpts_t, ptmx_t;
Chris PeBenito a7c3a1
	')
Karl MacMillan f0c985
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito c2c00b
	allow $1 ptmx_t:chr_file rw_file_perms;
Karl MacMillan f0c985
Chris PeBenito c0868a
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito 0c73cd
	allow $1 devpts_t:filesystem getattr;
Chris PeBenito 0c73cd
	dontaudit $1 bsdpty_device_t:chr_file { getattr read write };
Chris PeBenito 0c73cd
	type_transition $1 devpts_t:chr_file $2;
Chris PeBenito 8a0da1
')
Chris PeBenito 8a0da1
Chris PeBenito 8a0da1
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito f67bc9
##	Write the console, all
Chris PeBenito f67bc9
##	ttys and all ptys.
Chris PeBenito f67bc9
## </summary>
Chris PeBenito f67bc9
## <param name="domain">
Chris PeBenito f67bc9
##	<summary>
Chris PeBenito f67bc9
##	Domain allowed access.
Chris PeBenito f67bc9
##	</summary>
Chris PeBenito f67bc9
## </param>
Chris PeBenito f67bc9
## <rolecap/>
Chris PeBenito f67bc9
#
Chris PeBenito f67bc9
interface(`term_write_all_terms',`
Chris PeBenito f67bc9
	gen_require(`
Chris PeBenito f67bc9
		attribute ttynode, ptynode;
Chris PeBenito f67bc9
		type console_device_t, devpts_t, tty_device_t;
Chris PeBenito f67bc9
	')
Chris PeBenito f67bc9
Chris PeBenito f67bc9
	dev_list_all_dev_nodes($1)
Chris PeBenito f67bc9
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito f67bc9
	allow $1 { console_device_t tty_device_t ttynode ptynode }:chr_file write_chr_file_perms;
Chris PeBenito f67bc9
')
Chris PeBenito f67bc9
Chris PeBenito f67bc9
########################################
Chris PeBenito f67bc9
## <summary>
Chris PeBenito 414e41
##	Read and write the console, all
Chris PeBenito 414e41
##	ttys and all ptys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito de2cee
#
Chris PeBenito 199895
interface(`term_use_all_terms',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode, ptynode;
Chris PeBenito a7c3a1
		type console_device_t, devpts_t, tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito d6c3ed
	allow $1 { devpts_t console_device_t tty_device_t ttynode ptynode }:chr_file rw_chr_file_perms;
Chris PeBenito de2cee
')
Chris PeBenito de2cee
Chris PeBenito 3b857e
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Write to the console.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 3b857e
#
Chris PeBenito 199895
interface(`term_write_console',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type console_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 3b857e
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 console_device_t:chr_file write_chr_file_perms;
Chris PeBenito 3b857e
')
Chris PeBenito 3b857e
Chris PeBenito 3ce6cb
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 0f73fd
##	Read from the console.
Chris PeBenito 0f73fd
## </summary>
Chris PeBenito 0f73fd
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 0f73fd
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 0f73fd
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 0f73fd
#
Chris PeBenito 0f73fd
interface(`term_read_console',`
Chris PeBenito 0f73fd
	gen_require(`
Chris PeBenito 0f73fd
		type console_device_t;
Chris PeBenito 0f73fd
	')
Chris PeBenito 0f73fd
Chris PeBenito 0f73fd
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 console_device_t:chr_file read_chr_file_perms;
Chris PeBenito 0f73fd
')
Chris PeBenito 0f73fd
Chris PeBenito 0f73fd
########################################
Chris PeBenito 0f73fd
## <summary>
Chris PeBenito 2f84a7
##	Do not audit attempts to read from the console.
Chris PeBenito 2f84a7
## </summary>
Chris PeBenito 2f84a7
## <param name="domain">
Chris PeBenito 2f84a7
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 2f84a7
##	</summary>
Chris PeBenito 2f84a7
## </param>
Chris PeBenito 2f84a7
## <rolecap/>
Chris PeBenito 2f84a7
#
Chris PeBenito 2f84a7
interface(`term_dontaudit_read_console',`
Chris PeBenito 2f84a7
	gen_require(`
Chris PeBenito 2f84a7
		type console_device_t;
Chris PeBenito 2f84a7
	')
Chris PeBenito 2f84a7
Chris PeBenito 2f84a7
	dontaudit $1 console_device_t:chr_file read_chr_file_perms;
Chris PeBenito 2f84a7
')
Chris PeBenito 2f84a7
Chris PeBenito 2f84a7
########################################
Chris PeBenito 2f84a7
## <summary>
Chris PeBenito 414e41
##	Read from and write to the console.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 3ce6cb
#
Chris PeBenito 199895
interface(`term_use_console',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type console_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 console_device_t:chr_file rw_chr_file_perms;
Chris PeBenito 3ce6cb
')
Chris PeBenito 3ce6cb
Chris PeBenito 3ce6cb
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Do not audit attemtps to read from
Chris PeBenito 414e41
##	or write to the console.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 3ce6cb
#
Chris PeBenito 199895
interface(`term_dontaudit_use_console',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type console_device_t;
Dan Walsh 3eaa99
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Dan Walsh 3eaa99
	dontaudit $1 console_device_t:chr_file rw_inherited_chr_file_perms;
Dan Walsh 3eaa99
	dontaudit $1 tty_device_t:chr_file rw_inherited_chr_file_perms;
Chris PeBenito 3ce6cb
')
Chris PeBenito 3ce6cb
Chris PeBenito 3ce6cb
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Set the attributes of the console
Chris PeBenito 414e41
##	device node.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 3ce6cb
#
Chris PeBenito 199895
interface(`term_setattr_console',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type console_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 0c73cd
	allow $1 console_device_t:chr_file setattr;
Chris PeBenito 3ce6cb
')
Chris PeBenito 3ce6cb
Chris PeBenito 3ce6cb
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito f7101c
##	Relabel from and to the console type.
Chris PeBenito f7101c
## </summary>
Chris PeBenito f7101c
## <param name="domain">
Chris PeBenito f7101c
##	<summary>
Chris PeBenito f7101c
##	Domain allowed access.
Chris PeBenito f7101c
##	</summary>
Chris PeBenito f7101c
## </param>
Chris PeBenito f7101c
#
Chris PeBenito f7101c
interface(`term_relabel_console',`
Chris PeBenito f7101c
	gen_require(`
Chris PeBenito f7101c
		type console_device_t;
Chris PeBenito f7101c
	')
Chris PeBenito f7101c
Chris PeBenito f7101c
	dev_list_all_dev_nodes($1)
Chris PeBenito f7101c
	allow $1 console_device_t:chr_file { relabelfrom relabelto };
Chris PeBenito f7101c
')
Chris PeBenito f7101c
Chris PeBenito f7101c
########################################
Chris PeBenito f7101c
## <summary>
Chris PeBenito d15dd5
##	Create the console device (/dev/console).
Chris PeBenito d15dd5
## </summary>
Chris PeBenito d15dd5
## <param name="domain">
Chris PeBenito d15dd5
##	<summary>
Chris PeBenito d15dd5
##	Domain allowed access.
Chris PeBenito d15dd5
##	</summary>
Chris PeBenito d15dd5
## </param>
Chris PeBenito d15dd5
#
Chris PeBenito d15dd5
interface(`term_create_console_dev',`
Chris PeBenito d15dd5
	gen_require(`
Chris PeBenito c0868a
		type console_device_t;
Chris PeBenito d15dd5
	')
Chris PeBenito d15dd5
Chris PeBenito c0868a
	dev_add_entry_generic_dirs($1)
Chris PeBenito d15dd5
	allow $1 console_device_t:chr_file create;
Chris PeBenito d15dd5
	allow $1 self:capability mknod;
Chris PeBenito d15dd5
')
Chris PeBenito d15dd5
Chris PeBenito d15dd5
########################################
Chris PeBenito d15dd5
## <summary>
Chris PeBenito a5e213
##	Get the attributes of a pty filesystem
Chris PeBenito a5e213
## </summary>
Chris PeBenito a5e213
## <param name="domain">
Chris PeBenito a5e213
##	<summary>
Chris PeBenito a5e213
##	Domain allowed access.
Chris PeBenito a5e213
##	</summary>
Chris PeBenito a5e213
## </param>
Chris PeBenito a5e213
#
Chris PeBenito a5e213
interface(`term_getattr_pty_fs',`
Chris PeBenito a5e213
	gen_require(`
Chris PeBenito a5e213
		type devpts_t;
Chris PeBenito a5e213
	')
Chris PeBenito a5e213
Chris PeBenito a5e213
	allow $1 devpts_t:filesystem getattr;
Chris PeBenito a5e213
')
Chris PeBenito a5e213
Chris PeBenito a5e213
########################################
Chris PeBenito a5e213
## <summary>
Chris PeBenito 0f707d
##	Do not audit attempts to get the
Chris PeBenito 0f707d
##	attributes of the /dev/pts directory.
Chris PeBenito 0f707d
## </summary>
Chris PeBenito 0f707d
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 0f707d
## </param>
Chris PeBenito 0f707d
#
Chris PeBenito 1815ba
interface(`term_dontaudit_getattr_pty_dirs',`
Chris PeBenito 0f707d
	gen_require(`
Chris PeBenito 0f707d
		type devpts_t;
Chris PeBenito 0f707d
	')
Chris PeBenito 0f707d
Chris PeBenito 0f707d
	dontaudit $1 devpts_t:dir getattr;
Chris PeBenito 0f707d
')
Chris PeBenito 0f707d
Chris PeBenito 0f707d
########################################
Chris PeBenito 0f707d
## <summary>
Chris PeBenito 842859
##	Search the contents of the /dev/pts directory.
Chris PeBenito 842859
## </summary>
Chris PeBenito 842859
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 842859
## </param>
Chris PeBenito 842859
#
Chris PeBenito 842859
interface(`term_search_ptys',`
Chris PeBenito 842859
	gen_require(`
Chris PeBenito 842859
		type devpts_t;
Chris PeBenito 842859
	')
Chris PeBenito 842859
Chris PeBenito 842859
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 devpts_t:dir search_dir_perms;
Chris PeBenito 871b68
')
Chris PeBenito 871b68
Chris PeBenito 871b68
########################################
Chris PeBenito 871b68
## <summary>
Chris PeBenito 871b68
##	Do not audit attempts to search the
Chris PeBenito 871b68
##	contents of the /dev/pts directory.
Chris PeBenito 871b68
## </summary>
Chris PeBenito 871b68
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 871b68
## </param>
Chris PeBenito 871b68
#
Chris PeBenito 871b68
interface(`term_dontaudit_search_ptys',`
Chris PeBenito 871b68
	gen_require(`
Chris PeBenito 871b68
		type devpts_t;
Chris PeBenito 871b68
	')
Chris PeBenito 871b68
Chris PeBenito a5e213
	dev_dontaudit_list_all_dev_nodes($1)
Chris PeBenito c0868a
	dontaudit $1 devpts_t:dir search_dir_perms;
Chris PeBenito 842859
')
Chris PeBenito 842859
Chris PeBenito 842859
########################################
Chris PeBenito 842859
## <summary>
Chris PeBenito 414e41
##	Read the /dev/pts directory to
Chris PeBenito 414e41
##	list all ptys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 3ce6cb
#
Chris PeBenito 199895
interface(`term_list_ptys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type devpts_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito 3ce6cb
')
Chris PeBenito 3ce6cb
Chris PeBenito 3ce6cb
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Do not audit attempts to read the
Chris PeBenito 5f38a6
##	/dev/pts directory.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 3ce6cb
#
Chris PeBenito 199895
interface(`term_dontaudit_list_ptys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type devpts_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Chris PeBenito 0c73cd
	dontaudit $1 devpts_t:dir { getattr search read };
Chris PeBenito 3ce6cb
')
Chris PeBenito 3ce6cb
Chris PeBenito 3ce6cb
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 5f38a6
##	Do not audit attempts to create, read,
Chris PeBenito 5f38a6
##	write, or delete the /dev/pts directory.
Chris PeBenito 5f38a6
## </summary>
Chris PeBenito 5f38a6
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 5f38a6
## </param>
Chris PeBenito 5f38a6
#
Chris PeBenito 1815ba
interface(`term_dontaudit_manage_pty_dirs',`
Chris PeBenito 5f38a6
	gen_require(`
Chris PeBenito 5f38a6
		type devpts_t;
Chris PeBenito 5f38a6
	')
Chris PeBenito 5f38a6
Chris PeBenito c0868a
	dontaudit $1 devpts_t:dir manage_dir_perms;
Chris PeBenito 5f38a6
')
Chris PeBenito 5f38a6
Chris PeBenito 5f38a6
########################################
Chris PeBenito 5f38a6
## <summary>
Chris PeBenito d6c3ed
##	Do not audit attempts to get the attributes
Chris PeBenito d6c3ed
##	of generic pty devices.
Chris PeBenito d6c3ed
## </summary>
Chris PeBenito d6c3ed
## <param name="domain">
Chris PeBenito d6c3ed
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito d6c3ed
##	</summary>
Chris PeBenito d6c3ed
## </param>
Chris PeBenito d6c3ed
#
Chris PeBenito d6c3ed
interface(`term_dontaudit_getattr_generic_ptys',`
Chris PeBenito d6c3ed
	gen_require(`
Chris PeBenito d6c3ed
		type devpts_t;
Chris PeBenito d6c3ed
	')
Chris PeBenito d6c3ed
Chris PeBenito d6c3ed
	dontaudit $1 devpts_t:chr_file getattr;
Chris PeBenito d6c3ed
')
Chris PeBenito d6c3ed
########################################
Chris PeBenito d6c3ed
## <summary>
Chris PeBenito 75beb9
##	ioctl of generic pty devices.
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito e08118
# cjp: added for ppp
Chris PeBenito 1815ba
interface(`term_ioctl_generic_ptys',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type devpts_t;
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito e08118
	dev_list_all_dev_nodes($1)
Chris PeBenito e08118
	allow $1 devpts_t:dir search;
Chris PeBenito e08118
	allow $1 devpts_t:chr_file ioctl;
Chris PeBenito e08118
')
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito d9845a
##	Allow setting the attributes of
Chris PeBenito d9845a
##	generic pty devices.
Chris PeBenito d9845a
## </summary>
Chris PeBenito d9845a
## <param name="domain">
Chris PeBenito d9845a
##	<summary>
Chris PeBenito d9845a
##	Domain allowed access.
Chris PeBenito d9845a
##	</summary>
Chris PeBenito d9845a
## </param>
Chris PeBenito d9845a
#
Chris PeBenito d9845a
# dwalsh: added for rhgb
Chris PeBenito d9845a
interface(`term_setattr_generic_ptys',`
Chris PeBenito d9845a
	gen_require(`
Chris PeBenito d9845a
		type devpts_t;
Chris PeBenito d9845a
	')
Chris PeBenito d9845a
Chris PeBenito d9845a
	allow $1 devpts_t:chr_file setattr;
Chris PeBenito d9845a
')
Chris PeBenito d9845a
Chris PeBenito d9845a
########################################
Chris PeBenito d9845a
## <summary>
Chris PeBenito 75beb9
##	Dontaudit setting the attributes of
Chris PeBenito 75beb9
##	generic pty devices.
Chris PeBenito 75beb9
## </summary>
Chris PeBenito 75beb9
## <param name="domain">
Chris PeBenito 75beb9
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 75beb9
##	</summary>
Chris PeBenito 75beb9
## </param>
Chris PeBenito 75beb9
#
Chris PeBenito 75beb9
# dwalsh: added for rhgb
Chris PeBenito 75beb9
interface(`term_dontaudit_setattr_generic_ptys',`
Chris PeBenito 75beb9
	gen_require(`
Chris PeBenito 75beb9
		type devpts_t;
Chris PeBenito 75beb9
	')
Chris PeBenito 75beb9
Chris PeBenito 75beb9
	dontaudit $1 devpts_t:chr_file setattr;
Chris PeBenito 75beb9
')
Chris PeBenito 75beb9
Chris PeBenito 75beb9
########################################
Chris PeBenito 75beb9
## <summary>
Chris PeBenito 414e41
##	Read and write the generic pty
Chris PeBenito 414e41
##	type.  This is generally only used in
Chris PeBenito 414e41
##	the targeted policy.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 3ce6cb
#
Chris PeBenito 1815ba
interface(`term_use_generic_ptys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type devpts_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 671673
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito e6a2ea
	allow $1 devpts_t:chr_file { rw_term_perms lock append };
Chris PeBenito 3ce6cb
')
Chris PeBenito 3ce6cb
Chris PeBenito de2cee
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Dot not audit attempts to read and
Chris PeBenito 414e41
##	write the generic pty type.  This is
Chris PeBenito 414e41
##	generally only used in the targeted policy.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito b4cd15
#
Chris PeBenito 1815ba
interface(`term_dontaudit_use_generic_ptys',`
Chris PeBenito 0e7216
	gen_require(`
Chris PeBenito 0e7216
		type devpts_t;
Chris PeBenito 0e7216
	')
Chris PeBenito 0c73cd
Chris PeBenito 87eb5c
	dontaudit $1 devpts_t:chr_file { getattr read write ioctl };
Chris PeBenito b4cd15
')
Chris PeBenito b4cd15
Chris PeBenito d6c3ed
#######################################
Chris PeBenito d6c3ed
## <summary>
Chris PeBenito dccbb8
##	Set the attributes of the tty device
Chris PeBenito d6c3ed
## </summary>
Chris PeBenito d6c3ed
## <param name="domain">
Chris PeBenito dccbb8
##	<summary>
Chris PeBenito dccbb8
##	Domain allowed access.
Chris PeBenito dccbb8
##	</summary>
Chris PeBenito d6c3ed
## </param>
Chris PeBenito d6c3ed
#
Chris PeBenito d6c3ed
interface(`term_setattr_controlling_term',`
Chris PeBenito dccbb8
	gen_require(`
Chris PeBenito dccbb8
		type devtty_t;
Chris PeBenito dccbb8
	')
Chris PeBenito d6c3ed
Chris PeBenito d6c3ed
	dev_list_all_dev_nodes($1)
Chris PeBenito d6c3ed
	allow $1 devtty_t:chr_file setattr;
Chris PeBenito d6c3ed
')
Chris PeBenito d6c3ed
Chris PeBenito b4cd15
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Read and write the controlling
Chris PeBenito 414e41
##	terminal (/dev/tty).
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito b4cd15
#
Chris PeBenito 199895
interface(`term_use_controlling_term',`
Chris PeBenito 0e7216
	gen_require(`
Chris PeBenito 0e7216
		type devtty_t;
Chris PeBenito 0e7216
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito da4fc9
	allow $1 devtty_t:chr_file { rw_term_perms lock append };
Chris PeBenito 811985
')
Chris PeBenito 811985
Chris PeBenito 811985
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 135b1b
##	Do not audit attempts to get attributes
Chris PeBenito 135b1b
##	on the pty multiplexor (/dev/ptmx).
Chris PeBenito 135b1b
## </summary>
Chris PeBenito 135b1b
## <param name="domain">
Chris PeBenito 135b1b
##	<summary>
Chris PeBenito 135b1b
##	Domain to not audit.
Chris PeBenito 135b1b
##	</summary>
Chris PeBenito 135b1b
## </param>
Chris PeBenito 135b1b
#
Chris PeBenito 135b1b
interface(`term_dontaudit_getattr_ptmx',`
Chris PeBenito 135b1b
	gen_require(`
Chris PeBenito 135b1b
		type ptmx_t;
Chris PeBenito 135b1b
	')
Chris PeBenito 135b1b
Chris PeBenito 135b1b
	dontaudit $1 ptmx_t:chr_file getattr;
Chris PeBenito 135b1b
')
Chris PeBenito 135b1b
Chris PeBenito 135b1b
########################################
Chris PeBenito 135b1b
## <summary>
Chris PeBenito e08118
##	Read and write the pty multiplexor (/dev/ptmx).
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito e08118
interface(`term_use_ptmx',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type ptmx_t;
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito c0868a
	dev_list_all_dev_nodes($1)
Chris PeBenito e08118
	allow $1 ptmx_t:chr_file rw_file_perms;
Chris PeBenito e08118
')
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito 414e41
##	Do not audit attempts to read and
Chris PeBenito 414e41
##	write the pty multiplexor (/dev/ptmx).
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 811985
#
Chris PeBenito 199895
interface(`term_dontaudit_use_ptmx',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type ptmx_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Chris PeBenito 0c73cd
	dontaudit $1 ptmx_t:chr_file { getattr read write };
Chris PeBenito 55a46d
')
Chris PeBenito 55a46d
Chris PeBenito 55a46d
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Get the attributes of all
Chris PeBenito 414e41
##	pty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito b4cd15
#
Chris PeBenito c3c753
interface(`term_getattr_all_ptys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ptynode;
Chris PeBenito 8f3a0a
		type devpts_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito 0c73cd
	allow $1 ptynode:chr_file getattr;
Chris PeBenito b4cd15
')
Chris PeBenito b4cd15
Chris PeBenito 7bba9d
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito d9fd8e
##	Do not audit attempts to get the
Chris PeBenito c3c753
##	attributes of any pty
Chris PeBenito d9fd8e
##	device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito d9fd8e
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito d9fd8e
## </param>
Chris PeBenito d9fd8e
#
Chris PeBenito c3c753
interface(`term_dontaudit_getattr_all_ptys',`
Chris PeBenito d9fd8e
	gen_require(`
Chris PeBenito d9fd8e
		attribute ptynode;
Chris PeBenito d9fd8e
	')
Chris PeBenito d9fd8e
Chris PeBenito d9fd8e
	dontaudit $1 ptynode:chr_file getattr;
Chris PeBenito d9fd8e
')
Chris PeBenito d9fd8e
Chris PeBenito d9fd8e
########################################
Chris PeBenito e5590e
## <summary>
Chris PeBenito c3c753
##	Set the attributes of all
Chris PeBenito e5590e
##	pty device nodes.
Chris PeBenito e5590e
## </summary>
Chris PeBenito e5590e
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e5590e
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito e5590e
#
Chris PeBenito c3c753
interface(`term_setattr_all_ptys',`
Chris PeBenito e5590e
	gen_require(`
Chris PeBenito e5590e
		attribute ptynode;
Chris PeBenito 8f3a0a
		type devpts_t;
Chris PeBenito e5590e
	')
Chris PeBenito e5590e
Chris PeBenito e5590e
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito e5590e
	allow $1 ptynode:chr_file setattr;
Chris PeBenito e5590e
')
Chris PeBenito e5590e
Chris PeBenito e5590e
########################################
Chris PeBenito e5590e
## <summary>
Chris PeBenito c3c753
##	Relabel to all ptys.
Chris PeBenito e5590e
## </summary>
Chris PeBenito e5590e
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e5590e
## </param>
Chris PeBenito e5590e
#
Chris PeBenito c3c753
interface(`term_relabelto_all_ptys',`
Chris PeBenito e5590e
	gen_require(`
Chris PeBenito e5590e
		attribute ptynode;
Chris PeBenito e5590e
	')
Chris PeBenito e5590e
Chris PeBenito e5590e
	allow $1 ptynode:chr_file relabelto;
Chris PeBenito e5590e
')
Chris PeBenito e5590e
Chris PeBenito e5590e
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Write to all ptys.
Chris PeBenito abc893
## </summary>
Chris PeBenito abc893
## <param name="domain">
Chris PeBenito abc893
##	<summary>
Chris PeBenito abc893
##	Domain allowed access.
Chris PeBenito abc893
##	</summary>
Chris PeBenito abc893
## </param>
Chris PeBenito abc893
#
Chris PeBenito c3c753
interface(`term_write_all_ptys',`
Chris PeBenito abc893
	gen_require(`
Chris PeBenito abc893
		attribute ptynode;
Chris PeBenito abc893
	')
Chris PeBenito abc893
Chris PeBenito abc893
	dev_list_all_dev_nodes($1)
Chris PeBenito abc893
	allow $1 ptynode:chr_file write_chr_file_perms;
Chris PeBenito abc893
')
Chris PeBenito abc893
Chris PeBenito abc893
########################################
Chris PeBenito abc893
## <summary>
Chris PeBenito c3c753
##	Read and write all ptys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 7bba9d
#
Chris PeBenito c3c753
interface(`term_use_all_ptys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ptynode;
Chris PeBenito 41c480
		type devpts_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito c0868a
	allow $1 devpts_t:dir list_dir_perms;
Chris PeBenito e6a2ea
	allow $1 ptynode:chr_file { rw_term_perms lock append };
Chris PeBenito 7bba9d
')
Chris PeBenito 7bba9d
Chris PeBenito d0eddb
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Do not audit attempts to read or write any ptys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito c3c753
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito d0eddb
#
Chris PeBenito c3c753
interface(`term_dontaudit_use_all_ptys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ptynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Dan Walsh 3eaa99
	dontaudit $1 ptynode:chr_file { rw_inherited_term_perms lock append };
Chris PeBenito d0eddb
')
Chris PeBenito d0eddb
Chris PeBenito b4cd15
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Relabel from and to all pty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 21871a
#
Chris PeBenito c3c753
interface(`term_relabel_all_ptys',`
Chris PeBenito 21871a
	gen_require(`
Chris PeBenito 21871a
		attribute ptynode;
Chris PeBenito df00b2
		type devpts_t;
Chris PeBenito 21871a
	')
Chris PeBenito 21871a
Chris PeBenito 21871a
	dev_list_all_dev_nodes($1)
Chris PeBenito 0bfccd
	relabel_chr_files_pattern($1, devpts_t, ptynode)
Chris PeBenito 21871a
')
Chris PeBenito 21871a
Chris PeBenito 21871a
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Get the attributes of all user
Chris PeBenito c3c753
##	pty device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
## <rolecap/>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_getattr_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_getattr_all_ptys() instead.')
Chris PeBenito c3c753
	term_getattr_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Do not audit attempts to get the
Chris PeBenito c3c753
##	attributes of any user pty
Chris PeBenito c3c753
##	device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_dontaudit_getattr_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_dontaudit_getattr_all_ptys() instead.')
Chris PeBenito c3c753
	term_dontaudit_getattr_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Set the attributes of all user
Chris PeBenito c3c753
##	pty device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
## <rolecap/>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_setattr_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_setattr_all_ptys() instead.')
Chris PeBenito c3c753
	term_setattr_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Relabel to all user ptys. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_relabelto_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_relabelto_all_ptys() instead.')
Chris PeBenito c3c753
	term_relabelto_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Write to all user ptys. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_write_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_write_all_ptys() instead.')
Chris PeBenito c3c753
	term_write_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Read and write all user ptys. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
## <rolecap/>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_use_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_use_all_ptys() instead.')
Chris PeBenito c3c753
	term_use_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Do not audit attempts to read any
Chris PeBenito c3c753
##	user ptys. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_dontaudit_use_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_dontaudit_use_all_ptys() instead.')
Chris PeBenito c3c753
	term_dontaudit_use_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Relabel from and to all user
Chris PeBenito c3c753
##	user pty device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_relabel_all_user_ptys',`
Chris PeBenito c3c753
	refpolicywarn(`$0 has been deprecated, use term_relabel_all_ptys() instead.')
Chris PeBenito c3c753
	term_relabel_all_ptys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito 414e41
##	Get the attributes of all unallocated
Chris PeBenito 414e41
##	tty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 7bba9d
#
Chris PeBenito 199895
interface(`term_getattr_unallocated_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 0c73cd
	allow $1 tty_device_t:chr_file getattr;
Chris PeBenito 7bba9d
')
Chris PeBenito 7bba9d
Chris PeBenito 7bba9d
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito a5f339
##	Do not audit attempts to get the attributes
Chris PeBenito a5f339
##	of all unallocated tty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito a5f339
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito a5f339
## </param>
Chris PeBenito a5f339
#
Chris PeBenito a5f339
interface(`term_dontaudit_getattr_unallocated_ttys',`
Chris PeBenito a5f339
	gen_require(`
Chris PeBenito a5f339
		type tty_device_t;
Chris PeBenito a5f339
	')
Chris PeBenito a5f339
Chris PeBenito a5f339
	dontaudit $1 tty_device_t:chr_file getattr;
Chris PeBenito a5f339
')
Chris PeBenito a5f339
Chris PeBenito a5f339
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Set the attributes of all unallocated
Chris PeBenito 414e41
##	tty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 7bba9d
#
Chris PeBenito 199895
interface(`term_setattr_unallocated_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 0c73cd
	allow $1 tty_device_t:chr_file setattr;
Chris PeBenito 7bba9d
')
Chris PeBenito 7bba9d
Chris PeBenito 7bba9d
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito ce6bf7
##	Do not audit attempts to set the attributes
Chris PeBenito ce6bf7
##	of unallocated tty device nodes.
Chris PeBenito ce6bf7
## </summary>
Chris PeBenito ce6bf7
## <param name="domain">
Chris PeBenito ce6bf7
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito ce6bf7
##	</summary>
Chris PeBenito ce6bf7
## </param>
Chris PeBenito ce6bf7
#
Chris PeBenito ce6bf7
interface(`term_dontaudit_setattr_unallocated_ttys',`
Chris PeBenito ce6bf7
	gen_require(`
Chris PeBenito ce6bf7
		type tty_device_t;
Chris PeBenito ce6bf7
	')
Chris PeBenito ce6bf7
Chris PeBenito ce6bf7
	dontaudit $1 tty_device_t:chr_file setattr;
Chris PeBenito ce6bf7
')
Chris PeBenito ce6bf7
Chris PeBenito ce6bf7
########################################
Chris PeBenito ce6bf7
## <summary>
Chris PeBenito 9cca1c
##	Do not audit attempts to ioctl
Chris PeBenito 9cca1c
##	unallocated tty device nodes.
Chris PeBenito 9cca1c
## </summary>
Chris PeBenito 9cca1c
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 9cca1c
## </param>
Chris PeBenito 9cca1c
#
Chris PeBenito 9cca1c
interface(`term_dontaudit_ioctl_unallocated_ttys',`
Chris PeBenito 9cca1c
	gen_require(`
Chris PeBenito 9cca1c
		type tty_device_t;
Chris PeBenito 9cca1c
	')
Chris PeBenito 9cca1c
Chris PeBenito 9cca1c
	dontaudit $1 tty_device_t:chr_file ioctl;
Chris PeBenito 9cca1c
')
Chris PeBenito 9cca1c
Chris PeBenito 9cca1c
########################################
Chris PeBenito 9cca1c
## <summary>
Chris PeBenito 414e41
##	Relabel from and to the unallocated
Chris PeBenito 414e41
##	tty type.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 4bf4ed
#
Chris PeBenito 199895
interface(`term_relabel_unallocated_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 0c73cd
	allow $1 tty_device_t:chr_file { relabelfrom relabelto };
Chris PeBenito 4bf4ed
')
Chris PeBenito 4bf4ed
Chris PeBenito 4bf4ed
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Relabel from all user tty types to
Chris PeBenito 414e41
##	the unallocated tty type.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito b4cd15
#
Chris PeBenito 199895
interface(`term_reset_tty_labels',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode;
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 0c73cd
	allow $1 ttynode:chr_file relabelfrom;
Chris PeBenito 0c73cd
	allow $1 tty_device_t:chr_file relabelto;
Chris PeBenito b4cd15
')
Chris PeBenito b4cd15
Chris PeBenito b4cd15
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito ce6bf7
##	Append to unallocated ttys.
Chris PeBenito ce6bf7
## </summary>
Chris PeBenito ce6bf7
## <param name="domain">
Chris PeBenito ce6bf7
##	<summary>
Chris PeBenito ce6bf7
##	Domain allowed access.
Chris PeBenito ce6bf7
##	</summary>
Chris PeBenito ce6bf7
## </param>
Chris PeBenito ce6bf7
#
Chris PeBenito ce6bf7
interface(`term_append_unallocated_ttys',`
Chris PeBenito ce6bf7
	gen_require(`
Chris PeBenito ce6bf7
		type tty_device_t;
Chris PeBenito ce6bf7
	')
Chris PeBenito ce6bf7
Chris PeBenito ce6bf7
	dev_list_all_dev_nodes($1)
Chris PeBenito 82d277
	allow $1 tty_device_t:chr_file append_chr_file_perms;
Chris PeBenito ce6bf7
')
Chris PeBenito ce6bf7
Chris PeBenito ce6bf7
########################################
Chris PeBenito ce6bf7
## <summary>
Chris PeBenito 414e41
##	Write to unallocated ttys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito daa0e0
#
Chris PeBenito 199895
interface(`term_write_unallocated_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 82d277
	allow $1 tty_device_t:chr_file write_chr_file_perms;
Chris PeBenito daa0e0
')
Chris PeBenito daa0e0
Chris PeBenito daa0e0
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Read and write unallocated ttys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito de2cee
#
Chris PeBenito 1815ba
interface(`term_use_unallocated_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 82d277
	allow $1 tty_device_t:chr_file rw_chr_file_perms;
Chris PeBenito de2cee
')
Chris PeBenito de2cee
Chris PeBenito de2cee
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Do not audit attempts to read or
Chris PeBenito 414e41
##	write unallocated ttys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito a7ee7f
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito de2cee
#
Chris PeBenito 1815ba
interface(`term_dontaudit_use_unallocated_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Dan Walsh 3eaa99
	dontaudit $1 tty_device_t:chr_file rw_inherited_chr_file_perms;
Chris PeBenito de2cee
')
Chris PeBenito de2cee
Chris PeBenito de2cee
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Get the attributes of all tty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito de2cee
#
Chris PeBenito c3c753
interface(`term_getattr_all_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Dan Walsh a947da
		type tty_device_t;
Chris PeBenito a7c3a1
		attribute ttynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 0c73cd
	allow $1 ttynode:chr_file getattr;
Dan Walsh a947da
	allow $1 tty_device_t:chr_file getattr;
Chris PeBenito ee5772
')
Chris PeBenito ee5772
Chris PeBenito ee5772
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Do not audit attempts to get the
Chris PeBenito c3c753
##	attributes of any tty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito ee5772
#
Chris PeBenito c3c753
interface(`term_dontaudit_getattr_all_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode;
Dan Walsh 3eaa99
		type tty_device_t;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito eda201
	dontaudit $1 ttynode:chr_file getattr;
Dan Walsh 3eaa99
	dontaudit $1 tty_device_t:chr_file getattr;
Chris PeBenito 4bf4ed
')
Chris PeBenito 4bf4ed
Chris PeBenito 4bf4ed
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Set the attributes of all tty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 4bf4ed
#
Chris PeBenito c3c753
interface(`term_setattr_all_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Chris PeBenito c9428d
	dev_list_all_dev_nodes($1)
Chris PeBenito eda201
	allow $1 ttynode:chr_file setattr;
Chris PeBenito b4cd15
')
Chris PeBenito b4cd15
Chris PeBenito a2d824
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Relabel from and to all tty device nodes.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito 4bf4ed
#
Chris PeBenito c3c753
interface(`term_relabel_all_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 0c73cd
	allow $1 ttynode:chr_file { relabelfrom relabelto };
Chris PeBenito 4bf4ed
')
Chris PeBenito 4bf4ed
Chris PeBenito 4bf4ed
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Write to all ttys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito daa0e0
#
Chris PeBenito c3c753
interface(`term_write_all_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 82d277
	allow $1 ttynode:chr_file write_chr_file_perms;
Chris PeBenito daa0e0
')
Chris PeBenito daa0e0
Chris PeBenito daa0e0
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito c3c753
##	Read and write all ttys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito a2d824
#
Chris PeBenito c3c753
interface(`term_use_all_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Karl MacMillan f0c985
	dev_list_all_dev_nodes($1)
Chris PeBenito 82d277
	allow $1 ttynode:chr_file rw_chr_file_perms;
Chris PeBenito a2d824
')
Chris PeBenito a2d824
Chris PeBenito de2cee
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Do not audit attempts to read or write
Chris PeBenito c3c753
##	any ttys.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 414e41
## </param>
Chris PeBenito de2cee
#
Chris PeBenito c3c753
interface(`term_dontaudit_use_all_ttys',`
Chris PeBenito a7c3a1
	gen_require(`
Chris PeBenito a7c3a1
		attribute ttynode;
Chris PeBenito a7c3a1
	')
Chris PeBenito 0c73cd
Dan Walsh 3eaa99
	dontaudit $1 ttynode:chr_file rw_inherited_chr_file_perms;
Chris PeBenito de2cee
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Get the attributes of all user tty
Chris PeBenito c3c753
##	device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
## <rolecap/>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_getattr_all_user_ttys',`
Chris PeBenito c3c753
	refpolicywarn(`$0() is deprecated, use term_getattr_all_ttys() instead.')
Chris PeBenito c3c753
	term_getattr_all_ttys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Do not audit attempts to get the
Chris PeBenito c3c753
##	attributes of any user tty
Chris PeBenito c3c753
##	device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Dominick Grift 705f70
##	Domain to not audit.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_dontaudit_getattr_all_user_ttys',`
Chris PeBenito c3c753
	refpolicywarn(`$0() is deprecated, use term_dontaudit_getattr_all_ttys() instead.')
Chris PeBenito c3c753
	term_dontaudit_getattr_all_ttys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Set the attributes of all user tty
Chris PeBenito c3c753
##	device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
## <rolecap/>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_setattr_all_user_ttys',`
Chris PeBenito c3c753
	refpolicywarn(`$0() is deprecated, use term_setattr_all_ttys() instead.')
Chris PeBenito c3c753
	term_setattr_all_ttys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Relabel from and to all user
Chris PeBenito c3c753
##	user tty device nodes. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_relabel_all_user_ttys',`
Chris PeBenito c3c753
	refpolicywarn(`$0() is deprecated, use term_relabel_all_ttys() instead.')
Chris PeBenito c3c753
	term_relabel_all_ttys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Write to all user ttys. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_write_all_user_ttys',`
Chris PeBenito c3c753
	refpolicywarn(`$0() is deprecated, use term_write_all_ttys() instead.')
Chris PeBenito c3c753
	term_write_all_ttys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Read and write all user to all user ttys. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
## <rolecap/>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_use_all_user_ttys',`
Chris PeBenito c3c753
	refpolicywarn(`$0() is deprecated, use term_use_all_ttys() instead.')
Chris PeBenito c3c753
	term_use_all_ttys($1)
Chris PeBenito c3c753
')
Chris PeBenito c3c753
Chris PeBenito c3c753
########################################
Chris PeBenito c3c753
## <summary>
Chris PeBenito c3c753
##	Do not audit attempts to read or write
Chris PeBenito c3c753
##	any user ttys. (Deprecated)
Chris PeBenito c3c753
## </summary>
Chris PeBenito c3c753
## <param name="domain">
Chris PeBenito c3c753
##	<summary>
Chris PeBenito c3c753
##	Domain allowed access.
Chris PeBenito c3c753
##	</summary>
Chris PeBenito c3c753
## </param>
Chris PeBenito c3c753
#
Chris PeBenito c3c753
interface(`term_dontaudit_use_all_user_ttys',`
Chris PeBenito c3c753
	refpolicywarn(`$0() is deprecated, use term_dontaudit_use_all_ttys() instead.')
Chris PeBenito c3c753
	term_dontaudit_use_all_ttys($1)
Chris PeBenito c3c753
')