diff --git a/refpolicy/policy/modules/system/userdomain.if b/refpolicy/policy/modules/system/userdomain.if index d90d158..88eabb2 100644 --- a/refpolicy/policy/modules/system/userdomain.if +++ b/refpolicy/policy/modules/system/userdomain.if @@ -1,4 +1,6 @@ # Copyright (C) 2005 Tresys Technology, LLC +## +## Policy for user domains ######################################## # @@ -791,3 +793,26 @@ allow $1_t domain:socket_class_set getattr; allow $1_t eventpollfs_t:file getattr; ') dnl endif TODO ') + +# +## +## +## Inherit the file descriptors from all user domains +## +## +## The type of the process performing this action. +## +## +## +# +define(`userdomain_use_all_users_file_descriptors',` +requires_block_template(`$0'_depend) +allow $1 userdomain:fd use; +') + +define(`userdomain_use_all_users_file_descriptors_depend',` +attribute userdomain; +class fd use; +') + +##