selinux-policy/policy/modules/services/gpm.if

## <summary>General Purpose Mouse driver</summary>

########################################
## <summary>
##	Connect to GPM over a unix domain
##	stream socket.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`gpm_stream_connect',`
	gen_require(`
		type gpmctl_t, gpm_t;
	')

	dev_list_all_dev_nodes($1)
	stream_connect_pattern($1, gpmctl_t, gpmctl_t, gpm_t)
')

########################################
## <summary>
##	Get the attributes of the GPM
##	control channel named socket.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`gpm_getattr_gpmctl',`
	gen_require(`
		type gpmctl_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 gpmctl_t:sock_file getattr_sock_file_perms;
')

########################################
## <summary>
##	Do not audit attempts to get the 
##	attributes of the GPM control channel
##	named socket.
## </summary>
## <param name="domain">
##	<summary>
##	Domain to not audit.
##	</summary>
## </param>
#
interface(`gpm_dontaudit_getattr_gpmctl',`
	gen_require(`
		type gpmctl_t;
	')

	dontaudit $1 gpmctl_t:sock_file getattr_sock_file_perms;
')

########################################
## <summary>
##	Set the attributes of the GPM
##	control channel named socket.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
#
interface(`gpm_setattr_gpmctl',`
	gen_require(`
		type gpmctl_t;
	')

	dev_list_all_dev_nodes($1)
	allow $1 gpmctl_t:sock_file setattr_sock_file_perms;
')
add gpm 2005-08-17 21:28:31 +00:00			`## <summary>General Purpose Mouse driver</summary>`

more xdm work 2006-01-20 22:02:24 +00:00			`########################################`
			`## <summary>`
			`## Connect to GPM over a unix domain`
			`## stream socket.`
			`## </summary>`
			`## <param name="domain">`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## <summary>`
more xdm work 2006-01-20 22:02:24 +00:00			`## Domain allowed access.`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## </summary>`
more xdm work 2006-01-20 22:02:24 +00:00			`## </param>`
			`#`
			interface(`gpm_stream_connect',`
			gen_require(`
			`type gpmctl_t, gpm_t;`
			`')`

Search parent directory to be able to interact with targets content. Search parent directory to be able to interact with targets content. Search parent directory to be able to interact with targets content. Search parent directory to be able to interact with targets content. Search parent directory to be able to interact with targets content. Search parent directory to be able to interact with targets content. Search parent directory to be able to interact with targets content. Search parent directory to be able to interact with targets content. Fix typo. Squash me with f7691806b4a54f3debfabaa403e1472acc17427e 2010-09-20 09:59:51 +00:00			`dev_list_all_dev_nodes($1)`
Use stream connect pattern. Use stream connect pattern. 2010-09-20 09:54:26 +00:00			`stream_connect_pattern($1, gpmctl_t, gpmctl_t, gpm_t)`
more xdm work 2006-01-20 22:02:24 +00:00			`')`

add gpm 2005-08-17 21:28:31 +00:00			`########################################`
			`## <summary>`
			`## Get the attributes of the GPM`
			`## control channel named socket.`
			`## </summary>`
			`## <param name="domain">`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## <summary>`
add gpm 2005-08-17 21:28:31 +00:00			`## Domain allowed access.`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## </summary>`
add gpm 2005-08-17 21:28:31 +00:00			`## </param>`
			`#`
			interface(`gpm_getattr_gpmctl',`
			gen_require(`
			`type gpmctl_t;`
			`')`

			`dev_list_all_dev_nodes($1)`
Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. 2010-09-20 09:59:03 +00:00			`allow $1 gpmctl_t:sock_file getattr_sock_file_perms;`
add gpm 2005-08-17 21:28:31 +00:00			`')`

			`########################################`
			`## <summary>`
			`## Do not audit attempts to get the`
			`## attributes of the GPM control channel`
			`## named socket.`
			`## </summary>`
			`## <param name="domain">`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## <summary>`
Services layer xml files. Signed-off-by: Dominick Grift <domg472@gmail.com> 2010-08-05 13:03:19 +00:00			`## Domain to not audit.`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## </summary>`
add gpm 2005-08-17 21:28:31 +00:00			`## </param>`
			`#`
			interface(`gpm_dontaudit_getattr_gpmctl',`
			gen_require(`
			`type gpmctl_t;`
			`')`

Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. 2010-09-20 09:59:03 +00:00			`dontaudit $1 gpmctl_t:sock_file getattr_sock_file_perms;`
add gpm 2005-08-17 21:28:31 +00:00			`')`

			`########################################`
			`## <summary>`
			`## Set the attributes of the GPM`
			`## control channel named socket.`
			`## </summary>`
			`## <param name="domain">`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## <summary>`
add gpm 2005-08-17 21:28:31 +00:00			`## Domain allowed access.`
xml building changes, add desc tag to booleans, add summary tag to bools 2006-02-10 18:41:53 +00:00			`## </summary>`
add gpm 2005-08-17 21:28:31 +00:00			`## </param>`
			`#`
			interface(`gpm_setattr_gpmctl',`
			gen_require(`
			`type gpmctl_t;`
			`')`

			`dev_list_all_dev_nodes($1)`
Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. Use permission sets where possible. 2010-09-20 09:59:03 +00:00			`allow $1 gpmctl_t:sock_file setattr_sock_file_perms;`
add gpm 2005-08-17 21:28:31 +00:00			`')`