#DESC Sound - Sound utilities

#

# Authors:  Mark Westerman <mark.westerman@.com>

# X-Debian-Packages: esound

#

#################################

#

# Rules for the sound_t domain.

#

daemon_base_domain(sound)

type sound_file_t, file_type, sysadmfile;

allow initrc_t sound_file_t:file { getattr read };

allow sound_t sound_file_t:file rw_file_perms;

# Use capabilities.

# Commented out by default.

#allow sound_t self:capability { sys_admin sys_rawio sys_time dac_override };

dontaudit sound_t self:capability { sys_admin sys_rawio sys_time dac_read_search dac_override };

# Read and write the sound device.

allow sound_t sound_device_t:chr_file rw_file_perms;

# Read and write ttys.

allow sound_t sysadm_tty_device_t:chr_file rw_file_perms;

read_locale(sound_t)

allow initrc_t sound_file_t:file { setattr write };