Blame strict/domains/program/irqbalance.te
|
Chris PeBenito |
0fbfa5 |
#DESC IRQBALANCE - IRQ balance daemon
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# Author: Ulrich Drepper <drepper@redhat.com>
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
#################################
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# Rules for the irqbalance_t domain.
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
daemon_domain(irqbalance)
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
# irqbalance needs access to /proc.
|
|
Chris PeBenito |
0fbfa5 |
allow irqbalance_t proc_t:file { read getattr };
|
|
Chris PeBenito |
0fbfa5 |
allow irqbalance_t sysctl_irq_t:dir r_dir_perms;
|
|
Chris PeBenito |
0fbfa5 |
allow irqbalance_t sysctl_irq_t:file rw_file_perms;
|