Blame refpolicy/policy/modules/admin/dmesg.if
|
Chris PeBenito |
c22038 |
## <summary>Policy for dmesg.</summary>
|
|
Chris PeBenito |
c22038 |
|
|
Chris PeBenito |
c22038 |
########################################
|
|
Chris PeBenito |
50aca6 |
## <summary>
|
|
Chris PeBenito |
414e41 |
## Execute dmesg in the dmesg domain.
|
|
Chris PeBenito |
50aca6 |
## </summary>
|
|
Chris PeBenito |
414e41 |
## <param name="domain">
|
|
Chris PeBenito |
414e41 |
## The type of the process performing this action.
|
|
Chris PeBenito |
414e41 |
## </param>
|
|
Chris PeBenito |
c22038 |
#
|
|
Chris PeBenito |
199895 |
interface(`dmesg_domtrans',`
|
|
Chris PeBenito |
7f2e39 |
gen_require(`
|
|
Chris PeBenito |
7f2e39 |
type dmesg_t, dmesg_exec_t;
|
|
Chris PeBenito |
7f2e39 |
class process sigchld;
|
|
Chris PeBenito |
7f2e39 |
class fd use;
|
|
Chris PeBenito |
7f2e39 |
class fifo_file rw_file_perms;
|
|
Chris PeBenito |
7f2e39 |
')
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
7f2e39 |
corecmd_search_sbin($1)
|
|
Chris PeBenito |
7f2e39 |
domain_auto_trans($1,dmesg_exec_t,dmesg_t)
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
allow $1 dmesg_t:fd use;
|
|
Chris PeBenito |
0c73cd |
allow dmesg_t $1:fd use;
|
|
Chris PeBenito |
0c73cd |
allow dmesg_t $1:fifo_file rw_file_perms;
|
|
Chris PeBenito |
0c73cd |
allow dmesg_t $1:process sigchld;
|
|
Chris PeBenito |
c22038 |
')
|
|
Chris PeBenito |
c22038 |
|
|
Chris PeBenito |
c22038 |
########################################
|
|
Chris PeBenito |
50aca6 |
## <summary>
|
|
Chris PeBenito |
414e41 |
## Execute dmesg in the caller domain.
|
|
Chris PeBenito |
50aca6 |
## </summary>
|
|
Chris PeBenito |
414e41 |
## <param name="domain">
|
|
Chris PeBenito |
414e41 |
## The type of the process performing this action.
|
|
Chris PeBenito |
414e41 |
## </param>
|
|
Chris PeBenito |
c22038 |
#
|
|
Chris PeBenito |
199895 |
interface(`dmesg_exec',`
|
|
Chris PeBenito |
7f2e39 |
gen_require(`
|
|
Chris PeBenito |
7f2e39 |
type dmesg_exec_t;
|
|
Chris PeBenito |
7f2e39 |
')
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
7f2e39 |
corecmd_search_sbin($1)
|
|
Chris PeBenito |
dc67f7 |
can_exec($1,dmesg_exec_t)
|
|
Chris PeBenito |
c22038 |
')
|
|
Chris PeBenito |
c22038 |
|