23 lines
572 B
Plaintext
23 lines
572 B
Plaintext
|
#DESC dmidecode - decodes DMI data for x86/ia64 bioses
|
||
|
|
#
|
||
|
|
# Author: Ivan Gyurdiev <ivg2@cornell.edu>
|
||
|
|
#
|
||
|
|
|
||
|
|
type dmidecode_t, domain, privmem;
|
||
|
|
type dmidecode_exec_t, file_type, exec_type, sysadmfile;
|
||
|
|
|
||
|
|
# Allow execution by the sysadm
|
||
|
|
role sysadm_r types dmidecode_t;
|
||
|
|
role system_r types dmidecode_t;
|
||
|
|
domain_auto_trans(sysadm_t, dmidecode_exec_t, dmidecode_t)
|
||
|
|
|
||
|
|
uses_shlib(dmidecode_t)
|
||
|
|
|
||
|
|
# Allow terminal access
|
||
|
|
access_terminal(dmidecode_t, sysadm)
|
||
|
|
|
||
|
|
# Allow dmidecode to read /dev/mem
|
||
|
|
allow dmidecode_t memory_device_t:chr_file read;
|
||
|
|
|
||
|
|
allow dmidecode_t self:capability sys_rawio;
|