2009-08-31 14:21:01 +00:00
|
|
|
|
2010-03-16 17:10:14 +00:00
|
|
|
policy_module(ptchown, 1.0.1)
|
2009-08-31 14:21:01 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
type ptchown_t;
|
|
|
|
|
type ptchown_exec_t;
|
|
|
|
|
application_domain(ptchown_t, ptchown_exec_t)
|
|
|
|
|
role system_r types ptchown_t;
|
|
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# ptchown local policy
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
allow ptchown_t self:capability { chown fowner fsetid setuid };
|
|
|
|
|
allow ptchown_t self:process { getcap setcap };
|
|
|
|
|
|
|
|
|
|
files_read_etc_files(ptchown_t)
|
|
|
|
|
|
|
|
|
|
fs_rw_anon_inodefs_files(ptchown_t)
|
|
|
|
|
|
|
|
|
|
term_setattr_generic_ptys(ptchown_t)
|
2010-03-16 12:37:41 +00:00
|
|
|
term_getattr_all_ptys(ptchown_t)
|
2010-02-11 19:20:10 +00:00
|
|
|
term_setattr_all_ptys(ptchown_t)
|
2009-08-31 14:21:01 +00:00
|
|
|
term_use_generic_ptys(ptchown_t)
|
|
|
|
|
term_use_ptmx(ptchown_t)
|
|
|
|
|
|
|
|
|
|
miscfiles_read_localization(ptchown_t)
|
