2010-05-24 19:32:01 +00:00
|
|
|
policy_module(rtkit, 1.1.0)
|
2009-09-15 13:53:24 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
type rtkit_daemon_t;
|
|
|
|
|
type rtkit_daemon_exec_t;
|
|
|
|
|
dbus_system_domain(rtkit_daemon_t, rtkit_daemon_exec_t)
|
2010-08-26 13:41:21 +00:00
|
|
|
init_system_domain(rtkit_daemon_t, rtkit_daemon_exec_t)
|
2009-09-15 13:53:24 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# rtkit_daemon local policy
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
allow rtkit_daemon_t self:capability { dac_read_search setuid sys_chroot setgid sys_nice sys_ptrace };
|
|
|
|
|
allow rtkit_daemon_t self:process { setsched getcap setcap setrlimit };
|
|
|
|
|
|
|
|
|
|
kernel_read_system_state(rtkit_daemon_t)
|
|
|
|
|
|
2010-03-19 18:28:27 +00:00
|
|
|
domain_getsched_all_domains(rtkit_daemon_t)
|
2009-09-15 13:53:24 +00:00
|
|
|
domain_read_all_domains_state(rtkit_daemon_t)
|
|
|
|
|
|
|
|
|
|
fs_rw_anon_inodefs_files(rtkit_daemon_t)
|
|
|
|
|
|
|
|
|
|
auth_use_nsswitch(rtkit_daemon_t)
|
|
|
|
|
|
|
|
|
|
logging_send_syslog_msg(rtkit_daemon_t)
|
|
|
|
|
|
2010-03-19 18:28:27 +00:00
|
|
|
miscfiles_read_localization(rtkit_daemon_t)
|
2009-09-15 13:53:24 +00:00
|
|
|
|
|
|
|
|
optional_policy(`
|
|
|
|
|
policykit_dbus_chat(rtkit_daemon_t)
|
|
|
|
|
')
|
