selinux-policy/policy/modules/admin/dmidecode.te


policy_module(dmidecode,1.2.2)

########################################
#
# Declarations
#

type dmidecode_t;
type dmidecode_exec_t;
application_domain(dmidecode_t,dmidecode_exec_t)
role system_r types dmidecode_t;

########################################
#
# Local policy
#

allow dmidecode_t self:capability sys_rawio;

dev_read_sysfs(dmidecode_t)
# Allow dmidecode to read /dev/mem
dev_read_raw_memory(dmidecode_t)

mls_file_read_all_levels(dmidecode_t)

term_list_ptys(dmidecode_t)

files_list_usr(dmidecode_t)

libs_use_ld_so(dmidecode_t)
libs_use_shared_libs(dmidecode_t)

locallogin_use_fds(dmidecode_t)
add dmidecode 2005-09-27 21:24:01 +00:00
trunk: 10 patches from dan. 2007-10-11 18:12:29 +00:00			`policy_module(dmidecode,1.2.2)`
add dmidecode 2005-09-27 21:24:01 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

			`type dmidecode_t;`
			`type dmidecode_exec_t;`
trunk: add application module 2007-07-19 18:57:48 +00:00			`application_domain(dmidecode_t,dmidecode_exec_t)`
			`role system_r types dmidecode_t;`
add dmidecode 2005-09-27 21:24:01 +00:00
			`########################################`
			`#`
			`# Local policy`
			`#`

			`allow dmidecode_t self:capability sys_rawio;`

trunk: 10 patches from dan. 2007-10-11 18:12:29 +00:00			`dev_read_sysfs(dmidecode_t)`
add dmidecode 2005-09-27 21:24:01 +00:00			`# Allow dmidecode to read /dev/mem`
			`dev_read_raw_memory(dmidecode_t)`

trunk: Deprecate mls_file_write_down() and mls_file_read_up(), replaced with mls_write_all_levels() and mls_read_all_levels(), for consistency. 2007-08-20 18:26:08 +00:00			`mls_file_read_all_levels(dmidecode_t)`
patch from dan Fri, 17 Mar 2006 15:22:53 -0500 2006-03-23 19:19:38 +00:00
add dmidecode 2005-09-27 21:24:01 +00:00			`term_list_ptys(dmidecode_t)`

			`files_list_usr(dmidecode_t)`

			`libs_use_ld_so(dmidecode_t)`
			`libs_use_shared_libs(dmidecode_t)`
pile o fixes 2005-10-26 16:00:13 +00:00
make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames. 2006-03-02 23:41:11 +00:00			`locallogin_use_fds(dmidecode_t)`