rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

interfaces needed for clock

This commit is contained in:
Chris PeBenito 2005-05-05 21:19:18 +00:00
parent 2274f9ae4a
commit 44a43b680b
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
refpolicy/policy/modules/kernel/devices.if
View File

@ -343,6 +343,31 @@ class dir { getattr read search };
class chr_file { getattr read ioctl };
')
########################################
#
# devices_write_realtime_clock(domain)
#
define(`devices_write_realtime_clock',`
requires_block_template(`$0'_depend)
allow $1 device_t:dir { getattr read search };
allow $1 clock_device_t:chr_file { setattr lock write append ioctl };
')
define(`devices_write_realtime_clock_depend',`
type device_t, clock_device_t;
class dir { getattr read search };
class chr_file { setattr lock write append ioctl };
')
########################################
#
# devices_modify_realtime_clock(domain)
#
define(`devices_modify_realtime_clock',`
devices_read_realtime_clock($1)
devices_write_realtime_clock($1)
')
########################################
#
# devices_record_sound_input(domain)