Tree - rpms/selinux-policy - src.fedoraproject.org

Forked from rpms/selinux-policy 5 years ago

Blob History Raw

Dominick Grift	95b6ef8	`policy_module(vlock, 1.1.1)`
	1ec3d1a
	1ec3d1a	`########################################`
	1ec3d1a	`#`
	1ec3d1a	`# Declarations`
	1ec3d1a	`#`
	1ec3d1a
Dominick Grift	95b6ef8	`attribute_role vlock_roles;`
Dominick Grift	95b6ef8
	1ec3d1a	`type vlock_t;`
	1ec3d1a	`type vlock_exec_t;`
	1ec3d1a	`application_domain(vlock_t, vlock_exec_t)`
Dominick Grift	95b6ef8	`role vlock_roles types vlock_t;`
	1ec3d1a
	1ec3d1a	`########################################`
	1ec3d1a	`#`
	1ec3d1a	`# Local policy`
	1ec3d1a	`#`
	1ec3d1a
	1ec3d1a	`dontaudit vlock_t self:capability { setuid setgid };`
	1ec3d1a	`allow vlock_t self:fd use;`
	1ec3d1a	`allow vlock_t self:fifo_file rw_fifo_file_perms;`
	1ec3d1a
	1ec3d1a	`kernel_read_system_state(vlock_t)`
	1ec3d1a
	1ec3d1a	`corecmd_list_bin(vlock_t)`
	1ec3d1a	`corecmd_read_bin_symlinks(vlock_t)`
	1ec3d1a
	1ec3d1a	`domain_use_interactive_fds(vlock_t)`
	1ec3d1a
	1ec3d1a	`files_dontaudit_search_home(vlock_t)`
	1ec3d1a
	1ec3d1a	`mls_file_write_all_levels(vlock_t)`
	1ec3d1a
	1ec3d1a	`selinux_dontaudit_getattr_fs(vlock_t)`
	1ec3d1a
Dominick Grift	95b6ef8	`auth_use_pam(vlock_t)`
	1ec3d1a
	1ec3d1a	`init_dontaudit_rw_utmp(vlock_t)`
	1ec3d1a
	1ec3d1a	`logging_send_syslog_msg(vlock_t)`
	1ec3d1a
	1ec3d1a	`userdom_dontaudit_search_user_home_dirs(vlock_t)`
	1ec3d1a	`userdom_use_inherited_user_terminals(vlock_t)`