diff --git a/refpolicy/policy/modules/system/domain.if b/refpolicy/policy/modules/system/domain.if index f41a1580..a3388c34 100644 --- a/refpolicy/policy/modules/system/domain.if +++ b/refpolicy/policy/modules/system/domain.if @@ -1,4 +1,6 @@ # Copyright (C) 2005 Tresys Technology, LLC +## +## Core policy for domains. ######################################## # @@ -131,6 +133,27 @@ attribute domain; class process signal; ') +######################################## +## +## +## Send a null signal to all domains. +## +## +## The type of the process performing this action. +## +## +## +# +define(`domain_signull_all_domains',` +requires_block_template(`$0'_depend) +allow $1 domain:process signull; +') + +define(`domain_signull_all_domains_depend',` +attribute domain; +class process signull; +') + ######################################## # # domain_kill_all_domains(domain) @@ -201,3 +224,5 @@ define(`domain_read_all_entrypoint_programs_depend',` attribute entry_type; class file { getattr read }; ') + +##