#######################################

#

# getty_transition(domain)

#

define(`getty_transition',`

requires_block_template(`$0'_depend)

allow $1 getty_exec_t:file { getattr read execute };

allow $1 getty_t:process transition;

type_transition $1 getty_exec_t:process getty_t;

dontaudit $1 getty_t:process { noatsecure siginh rlimitinh };

allow $1 getty_t:fd use;

allow getty_t $1:fd use;

allow getty_t $1:fifo_file rw_file_perms;

allow getty_t $1:process sigchld;

')

define(`getty_transition_depend',`

type getty_t, getty_exec_t;

class file { getattr read execute };

class process { transition noatsecure siginh rlimitinh sigchld };

class fd use;

class fifo_file rw_file_perms;

')

#######################################

#

# getty_read_log_file(domain)

#

define(`getty_read_log_file',`

requires_block_template(`$0'_depend)

allow $1 getty_log_t:file { getattr read };

')

define(`getty_read_log_file_depend',`

type getty_log_t;

class file { getattr read };

')

#######################################

#

# getty_read_config_file(domain)

#

define(`getty_read_config_file',`

requires_block_template(`$0'_depend)

allow $1 getty_etc_t:file { getattr read };

')

define(`getty_read_config_file_depend',`

type getty_etc_t;

class file { getattr read };

')

#######################################

#

# getty_modify_config_file(domain)

#

define(`getty_modify_config_file',`

requires_block_template(`$0'_depend)

allow $1 getty_etc_t:file { getattr read write };

')

define(`getty_modify_config_file_depend',`

type getty_etc_t;

class file { getattr read write };

')