/[gentoo-projects]/selinux/gpm/gpm.te
Gentoo

Contents of /selinux/gpm/gpm.te

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.6 - (hide annotations) (download)
Thu Jan 20 10:21:28 2005 UTC (13 years, 10 months ago) by kaiowas
Branch: MAIN
CVS Tags: HEAD
Changes since 1.5: +3 -0 lines
merge with upstream

1 pebenito 1.1 #DESC Gpm - General Purpose Mouse driver
2     #
3     # Authors: Stephen Smalley <sds@epoch.ncsc.mil> and Timothy Fraser
4     # X-Debian-Packages: gpm
5     #
6    
7     #################################
8     #
9     # Rules for the gpm_t domain.
10     #
11     # gpm_t is the domain of the console mouse server.
12     # gpm_exec_t is the type of the console mouse server program.
13 pebenito 1.2 # gpmctl_t is the type of the Unix domain socket or pipe created
14 pebenito 1.1 # by the console mouse server.
15     #
16     daemon_domain(gpm)
17    
18 kaiowas 1.4 type gpmctl_t, file_type, dev_fs;
19 pebenito 1.1
20     tmp_domain(gpm)
21    
22 kaiowas 1.5 # Allow to read the /etc/gpm/ conf files
23 pebenito 1.1 type gpm_conf_t, file_type, sysadmfile;
24     r_dir_file(gpm_t, gpm_conf_t)
25    
26     # Use capabilities.
27     allow gpm_t self:capability { setuid dac_override sys_admin sys_tty_config };
28    
29     # Create and bind to /dev/gpmctl.
30     file_type_auto_trans(gpm_t, device_t, gpmctl_t, { sock_file fifo_file })
31     allow gpm_t gpmctl_t:unix_stream_socket name_bind;
32     allow gpm_t self:unix_dgram_socket create_socket_perms;
33     allow gpm_t self:unix_stream_socket create_stream_socket_perms;
34    
35 pebenito 1.2 allow gpm_t mouse_device_t:chr_file rw_file_perms;
36 pebenito 1.1
37     # Read and write ttys.
38     allow gpm_t tty_device_t:chr_file rw_file_perms;
39    
40     # Access the mouse.
41 pebenito 1.2 allow gpm_t { event_device_t mouse_device_t }:chr_file rw_file_perms;
42 pebenito 1.1 allow gpm_t device_t:lnk_file { getattr read };
43 pebenito 1.2
44     read_locale(gpm_t)
45 kaiowas 1.6
46     allow initrc_t gpmctl_t:sock_file setattr;
47    

  ViewVC Help
Powered by ViewVC 1.1.20