diff --git a/refpolicy/policy/modules/system/getty.if b/refpolicy/policy/modules/system/getty.if new file mode 100644 index 0000000..1e12c18 --- /dev/null +++ b/refpolicy/policy/modules/system/getty.if @@ -0,0 +1,59 @@ +####################################### +# +# getty_transition(domain,[`optional']) +# +define(`getty_transition',` +requires_block_template(getty_transition_depend,$2) +allow $1 getty_exec_t:file { getattr read execute }; +allow $1 getty_t:process transition; +type_transition $1 getty_exec_t:file getty_t; +dontaudit $1 getty_t:process { noatsecure siginh rlimitinh }; +') + +define(`getty_transition_depend',` +type getty_t, getty_exec_t; +class file { getattr read execute }; +class process { transition noatsecure siginh rlimitinh }; +') + +####################################### +# +# getty_read_log_file(domain,[`optional']) +# +define(`getty_read_log_file',` +requires_block_template(getty_read_log_file_depend,$2) +allow $1 getty_log_t:file { getattr read }; +') + +define(`getty_read_log_file_depend',` +type getty_log_t; +class file { getattr read }; +') + +####################################### +# +# getty_read_config_file(domain,[`optional']) +# +define(`getty_read_config_file',` +requires_block_template(getty_read_config_file_depend,$2) +allow $1 getty_etc_t:file { getattr read }; +') + +define(`getty_read_config_file_depend',` +type getty_etc_t; +class file { getattr read }; +') + +####################################### +# +# getty_modify_config_file(domain,[`optional']) +# +define(`getty_modify_config_file',` +requires_block_template(getty_modify_config_file_depend,$2) +allow $1 getty_etc_t:file { getattr read write }; +') + +define(`getty_modify_config_file_depend',` +type getty_etc_t; +class file { getattr read write }; +')