selinux-policy/mls/domains/program/unused/lcd.te

36 lines
923 B
Plaintext
Raw Normal View History

2005-11-22 19:28:03 +00:00
#DESC lcd - program for Cobalt LCD device
#
# Author: Russell Coker <russell@coker.com.au>
#
#################################
#
# Rules for the lcd_t domain.
#
# lcd_t is the domain for the lcd program.
# lcd_exec_t is the type of the corresponding program.
#
type lcd_t, domain, privlog;
role sysadm_r types lcd_t;
role system_r types lcd_t;
uses_shlib(lcd_t)
type lcd_exec_t, file_type, sysadmfile, exec_type;
type lcd_device_t, file_type;
# Transition into this domain when you run this program.
domain_auto_trans(initrc_t, lcd_exec_t, lcd_t)
domain_auto_trans(sysadm_t, lcd_exec_t, lcd_t)
allow lcd_t lcd_device_t:chr_file rw_file_perms;
# for /etc/locks/.lcd_lock
lock_domain(lcd)
allow lcd_t etc_t:lnk_file read;
allow lcd_t var_t:dir search;
# Access the terminal.
allow lcd_t admin_tty_type:chr_file rw_file_perms;
ifdef(`gnome-pty-helper.te', `allow lcd_t sysadm_gph_t:fd use;')
allow lcd_t privfd:fd use;