Dominick Grift c7b0572
## <summary>Sensor information logging daemon.</summary>
Dominick Grift c7b0572
Dominick Grift c7b0572
########################################
Dominick Grift c7b0572
## <summary>
Dominick Grift c7b0572
##	All of the rules required to
Dominick Grift c7b0572
##	administrate an sensord environment.
Dominick Grift c7b0572
## </summary>
Dominick Grift c7b0572
## <param name="domain">
Dominick Grift c7b0572
##	<summary>
Dominick Grift c7b0572
##	Domain allowed access.
Dominick Grift c7b0572
##	</summary>
Dominick Grift c7b0572
## </param>
Dominick Grift c7b0572
## <param name="role">
Dominick Grift c7b0572
##	<summary>
Dominick Grift c7b0572
##	Role allowed access.
Dominick Grift c7b0572
##	</summary>
Dominick Grift c7b0572
## </param>
Dominick Grift c7b0572
## <rolecap/>
Dominick Grift c7b0572
#
Dominick Grift c7b0572
interface(`sensord_admin',`
Dominick Grift c7b0572
	gen_require(`
Dominick Grift c7b0572
		type sensord_t, sensord_initrc_exec_t, sensord_var_run_t;
Dominick Grift c7b0572
	')
Dominick Grift c7b0572
Dominick Grift c7b0572
	allow $1 sensord_t:process { ptrace signal_perms };
Dominick Grift c7b0572
	ps_process_pattern($1, sensord_t)
Dominick Grift c7b0572
Dominick Grift c7b0572
	init_labeled_script_domtrans($1, sensord_initrc_exec_t)
Dominick Grift c7b0572
	domain_system_change_exemption($1)
Dominick Grift c7b0572
	role_transition $2 sensord_initrc_exec_t system_r;
Dominick Grift c7b0572
	allow $2 system_r;
Dominick Grift c7b0572
Dominick Grift c7b0572
	files_search_pids($1)
Dominick Grift c7b0572
	admin_pattern($1, sensord_var_run_t)
Dominick Grift c7b0572
')