a few more copied over
This commit is contained in:
parent
0d7ad32935
commit
0bc32e04de
@ -7,15 +7,21 @@ policy_module(udev,1.0)
|
||||
# Declarations
|
||||
#
|
||||
|
||||
type udev_t; # nscd_client_domain, privfd, privowner
|
||||
type udev_t; # nscd_client_domain, privowner
|
||||
type udev_exec_t;
|
||||
type udev_helper_exec_t;
|
||||
domain_make_daemon_domain(udev_t,udev_exec_t)
|
||||
domain_make_entrypoint_file(udev_t,udev_helper_exec_t)
|
||||
domain_make_file_descriptors_widely_inheritable(udev_t)
|
||||
|
||||
type udev_etc_t alias etc_udev_t;
|
||||
files_make_file(udev_etc_t)
|
||||
|
||||
# udev_runtime_t is the type of the udev table file
|
||||
# cjp: this is probably a copy of udev_tbl_t and can be removed
|
||||
type udev_runtime_t;
|
||||
files_make_file(udev_runtime_t)
|
||||
|
||||
type udev_tbl_t alias udev_tdb_t;
|
||||
files_make_file(udev_tbl_t)
|
||||
devices_create_dev_entry(udev_t,udev_tbl_t,file)
|
||||
@ -71,6 +77,8 @@ kernel_transition_from(udev_t,udev_exec_t)
|
||||
|
||||
devices_manage_device_nodes(udev_t)
|
||||
|
||||
init_script_read_runtime_data(udev_t)
|
||||
|
||||
files_read_runtime_system_config(udev_t)
|
||||
files_read_general_system_config(udev_t)
|
||||
|
||||
@ -97,8 +105,6 @@ ifdef(`TODO',`
|
||||
allow udev_t var_log_t:dir search;
|
||||
allow udev_t var_lock_t:dir search;
|
||||
allow udev_t var_lock_t:file getattr;
|
||||
# TODO: Need macro for reading daemon runtime data.
|
||||
allow udev_t initrc_var_run_t:file r_file_perms;
|
||||
|
||||
# Mount
|
||||
allow udev_t mnt_t:dir search;
|
||||
|
Loading…
Reference in New Issue
Block a user