Chris PeBenito 20e306
Chris PeBenito a3cf80
policy_module(dmidecode,1.0.1)
Chris PeBenito 20e306
Chris PeBenito 20e306
########################################
Chris PeBenito 20e306
#
Chris PeBenito 20e306
# Declarations
Chris PeBenito 20e306
#
Chris PeBenito 20e306
Chris PeBenito 20e306
type dmidecode_t;
Chris PeBenito 20e306
domain_type(dmidecode_t)
Chris PeBenito 20e306
role system_r types dmidecode_t;
Chris PeBenito 20e306
Chris PeBenito 20e306
type dmidecode_exec_t;
Chris PeBenito 20e306
domain_entry_file(dmidecode_t,dmidecode_exec_t)
Chris PeBenito 20e306
Chris PeBenito 20e306
########################################
Chris PeBenito 20e306
#
Chris PeBenito 20e306
# Local policy
Chris PeBenito 20e306
#
Chris PeBenito 20e306
Chris PeBenito 20e306
allow dmidecode_t self:capability sys_rawio;
Chris PeBenito 20e306
Chris PeBenito 20e306
# Allow dmidecode to read /dev/mem
Chris PeBenito 20e306
dev_read_raw_memory(dmidecode_t)
Chris PeBenito 20e306
Chris PeBenito a3cf80
mls_file_read_up(dmidecode_t)
Chris PeBenito a3cf80
Chris PeBenito 20e306
term_list_ptys(dmidecode_t)
Chris PeBenito 20e306
Chris PeBenito 20e306
files_list_usr(dmidecode_t)
Chris PeBenito 20e306
Chris PeBenito 20e306
libs_use_ld_so(dmidecode_t)
Chris PeBenito 20e306
libs_use_shared_libs(dmidecode_t)
Chris PeBenito 33acca
Chris PeBenito 1c1ac6
locallogin_use_fds(dmidecode_t)
Don Miner 305106
Chris PeBenito 33acca
ifdef(`targeted_policy',`
Chris PeBenito 1815ba
	term_use_generic_ptys(dmidecode_t)
Chris PeBenito 1815ba
	term_use_unallocated_ttys(dmidecode_t)
Chris PeBenito 33acca
')