← Back to branch summary

~ubuntu-branches/ubuntu/maverick/refpolicy-ubuntu/maverick

« back to all changes in this revision

Viewing changes to policy/modules/admin/consoletype.te

  • Committer: Bazaar Package Importer
  • Author(s): Marshall Miller
  • Date: 2009-03-24 02:17:01 UTC
  • Revision ID: james.westby@ubuntu.com-20090324021701-ost9gewrbluclm5r
Tags: upstream-0.2.20090324
Import upstream version 0.2.20090324

Show diffs side-by-side

added added

removed removed

Lines of Context:
policy/modules/admin/consoletype.te
 
1
 
 
2
policy_module(consoletype, 1.7.1)
 
3
 
 
4
########################################
 
5
#
 
6
# Declarations
 
7
#
 
8
 
 
9
type consoletype_t;
 
10
type consoletype_exec_t;
 
11
application_executable_file(consoletype_exec_t)
 
12
init_domain(consoletype_t, consoletype_exec_t)
 
13
init_system_domain(consoletype_t, consoletype_exec_t)
 
14
role system_r types consoletype_t;
 
15
 
 
16
########################################
 
17
#
 
18
# Local declarations
 
19
#
 
20
 
 
21
allow consoletype_t self:capability { sys_admin sys_tty_config };
 
22
allow consoletype_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
 
23
allow consoletype_t self:fd use;
 
24
allow consoletype_t self:fifo_file rw_fifo_file_perms;
 
25
allow consoletype_t self:sock_file read_sock_file_perms;
 
26
allow consoletype_t self:unix_dgram_socket create_socket_perms;
 
27
allow consoletype_t self:unix_stream_socket create_stream_socket_perms;
 
28
allow consoletype_t self:unix_dgram_socket sendto;
 
29
allow consoletype_t self:unix_stream_socket connectto;
 
30
allow consoletype_t self:shm create_shm_perms;
 
31
allow consoletype_t self:sem create_sem_perms;
 
32
allow consoletype_t self:msgq create_msgq_perms;
 
33
allow consoletype_t self:msg { send receive };
 
34
 
 
35
kernel_use_fds(consoletype_t)
 
36
kernel_dontaudit_read_system_state(consoletype_t)
 
37
 
 
38
fs_getattr_all_fs(consoletype_t)
 
39
fs_search_auto_mountpoints(consoletype_t)
 
40
fs_write_nfs_files(consoletype_t)
 
41
fs_list_inotifyfs(consoletype_t)
 
42
 
 
43
mls_file_read_all_levels(consoletype_t)
 
44
mls_file_write_all_levels(consoletype_t)
 
45
 
 
46
term_use_all_terms(consoletype_t)
 
47
 
 
48
init_use_fds(consoletype_t)
 
49
init_use_script_ptys(consoletype_t)
 
50
init_use_script_fds(consoletype_t)
 
51
init_rw_script_pipes(consoletype_t)
 
52
 
 
53
domain_use_interactive_fds(consoletype_t)
 
54
 
 
55
files_dontaudit_read_root_files(consoletype_t)
 
56
files_list_usr(consoletype_t)
 
57
 
 
58
userdom_use_user_terminals(consoletype_t)
 
59
 
 
60
ifdef(`distro_redhat',`
 
61
        fs_rw_tmpfs_chr_files(consoletype_t)
 
62
')
 
63
 
 
64
optional_policy(`
 
65
        apm_use_fds(consoletype_t)
 
66
        apm_write_pipes(consoletype_t)
 
67
')
 
68
 
 
69
optional_policy(`
 
70
        auth_read_pam_pid(consoletype_t)
 
71
')
 
72
 
 
73
optional_policy(`
 
74
        cron_read_pipes(consoletype_t)
 
75
        cron_use_system_job_fds(consoletype_t)
 
76
')
 
77
 
 
78
optional_policy(`
 
79
        files_read_etc_files(consoletype_t)
 
80
        firstboot_use_fds(consoletype_t)
 
81
        firstboot_rw_pipes(consoletype_t)
 
82
')
 
83
 
 
84
optional_policy(`
 
85
        hal_dontaudit_use_fds(consoletype_t)
 
86
        hal_dontaudit_rw_pipes(consoletype_t)
 
87
')
 
88
 
 
89
optional_policy(`
 
90
        hotplug_dontaudit_use_fds(consoletype_t)
 
91
')
 
92
 
 
93
optional_policy(`
 
94
        logrotate_dontaudit_use_fds(consoletype_t)
 
95
')
 
96
 
 
97
optional_policy(`
 
98
        lpd_read_config(consoletype_t)
 
99
')
 
100
 
 
101
optional_policy(`
 
102
        nis_use_ypbind(consoletype_t)
 
103
')
 
104
 
 
105
optional_policy(`
 
106
        # Commonly used from postinst scripts
 
107
        rpm_read_pipes(consoletype_t)
 
108
')
 
109
 
 
110
optional_policy(`
 
111
        userdom_use_unpriv_users_fds(consoletype_t)
 
112
')
 
113
 
 
114
optional_policy(`
 
115
        kernel_read_xen_state(consoletype_t)
 
116
        kernel_write_xen_state(consoletype_t)
 
117
        xen_append_log(consoletype_t)
 
118
        xen_dontaudit_rw_unix_stream_sockets(consoletype_t)
 
119
        xen_dontaudit_use_fds(consoletype_t)
 
120
')