selinux-policy/policy/modules/kernel/mcs.te

policy_module(mcs, 1.2.0)

########################################
#
# Declarations
#

attribute mcskillall;
attribute mcsptraceall;
attribute mcssetcats;
attribute mcswriteall;
attribute mcsreadall;
attribute mcsuntrustedproc;
bump module versions for release. 2009-11-17 15:05:56 +00:00			`policy_module(mcs, 1.2.0)`
patch from dan Tue, 14 Feb 2006 09:01:16 -0500 2006-02-16 19:32:13 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

			`attribute mcskillall;`
patch from dan Wed, 26 Jul 2006 14:42:46 -0400 2006-07-28 15:13:58 +00:00			`attribute mcsptraceall;`
Constrain transitions in MCS so unconfined_t cannot have arbitrary category sets. 2006-03-29 16:23:17 +00:00			`attribute mcssetcats;`
revise MCS constraints to use only MCS-specific attributes. 2009-10-07 15:48:14 +00:00			`attribute mcswriteall;`
			`attribute mcsreadall;`
Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc Allow shutdown to write utmp and search /var/log Allow mozilla_plugin to send nsplugin signals Split out samba_run_unconfined_net from unconfined_domain stuff. TO allow unconfined.pp module to be removed Allow nrpe to send signal and sigkill to the plugins Fix up xguest to allow it to read hwdata and gconf_etc_t Allow initrc_t to manage faillog 2010-09-22 20:42:32 +00:00			`attribute mcsuntrustedproc;`