~ubuntu-branches/ubuntu/dapper/selinux-policy-default/dapper

« back to all changes in this revision

Viewing changes to domains/program/unused/loadkeys.te

  • Committer: Bazaar Package Importer
  • Author(s): Russell Coker
  • Date: 2004-06-10 18:08:00 UTC
  • Revision ID: james.westby@ubuntu.com-20040610180800-gagxr0cdovi7mv2i
Tags: upstream-1.12
ImportĀ upstreamĀ versionĀ 1.12

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
#DESC loadkeys - for changing to unicode at login time
 
2
#
 
3
# Author:  Russell Coker <russell@coker.com.au>
 
4
 
 
5
#
 
6
# loadkeys_exec_t is the type of the wrapper
 
7
#
 
8
type loadkeys_exec_t, file_type, sysadmfile, exec_type;
 
9
 
 
10
can_exec(initrc_t, loadkeys_exec_t)
 
11
 
 
12
# Derived domain based on the calling user domain and the program.
 
13
type loadkeys_t, domain;
 
14
 
 
15
# Transition from the user domain to this domain.
 
16
domain_auto_trans(unpriv_userdomain, loadkeys_exec_t, loadkeys_t)
 
17
 
 
18
uses_shlib(loadkeys_t)
 
19
dontaudit loadkeys_t proc_t:dir search;
 
20
allow loadkeys_t proc_t:file { getattr read };
 
21
allow loadkeys_t self:process { fork sigchld };
 
22
 
 
23
allow loadkeys_t self:fifo_file rw_file_perms;
 
24
allow loadkeys_t bin_t:dir search;
 
25
allow loadkeys_t bin_t:lnk_file read;
 
26
can_exec(loadkeys_t, { shell_exec_t bin_t })
 
27
 
 
28
read_locale(loadkeys_t)
 
29
 
 
30
dontaudit loadkeys_t etc_runtime_t:file { getattr read };
 
31
 
 
32
# Use capabilities.
 
33
allow loadkeys_t self:capability { setuid sys_tty_config };
 
34
 
 
35
allow loadkeys_t local_login_t:fd use;
 
36
allow loadkeys_t devtty_t:chr_file rw_file_perms;
 
37
 
 
38
# The user role is authorized for this domain.
 
39
in_user_role(loadkeys_t)
 
40
 
 
41
# Write to the user domain tty.
 
42
allow loadkeys_t ttyfile:chr_file rw_file_perms;
 
43