rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

reorganize the policy

Browse Source
This commit is contained in:
Chris PeBenito 2005-04-28 15:46:23 +00:00
parent dfb86adde5
commit 4600e08867
1 changed files with 16 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
refpolicy/policy/modules/system/getty.te
View File

@ -36,41 +36,32 @@ allow getty_t getty_log_t:file { getattr append setattr };
kernel_read_hardware_state(getty_t) kernel_read_hardware_state(getty_t)
files_create_private_config(getty_t,getty_etc_t,{ file dir })
files_create_private_tmp_data(getty_t,getty_tmp_t,{ file dir })
authlogin_modify_login_records(getty_t)
logging_send_system_log_message(getty_t)
# Write to /var/run/utmp.
files_modify_system_runtime_data(getty_t)
files_manage_system_lock_files(getty_t)
files_read_runtime_system_config(getty_t)
files_read_general_system_config(getty_t)
miscfiles_read_localization(getty_t)
# for error condition handling # for error condition handling
filesystem_get_persistent_filesystem_attributes(getty_t) filesystem_get_persistent_filesystem_attributes(getty_t)
# Chown, chmod, read and write ttys. # Chown, chmod, read and write ttys.
terminal_use_all_terminals(getty_t) terminal_use_all_terminals(getty_t)
terminal_set_console_attributes(getty_t)
############## init_script_use_pseudoterminal(getty_t)
# TODO Items
# TODO:May need to create a new interface for setting device node attributes files_modify_system_runtime_data(getty_t)
#allow getty_t console_device_t:chr_file setattr; files_create_private_config(getty_t,getty_etc_t,{ file dir })
files_create_private_tmp_data(getty_t,getty_tmp_t,{ file dir })
files_manage_system_lock_files(getty_t)
files_read_runtime_system_config(getty_t)
files_read_general_system_config(getty_t)
authlogin_modify_login_records(getty_t)
#locallogin_transition(getty_t)
logging_send_system_log_message(getty_t)
miscfiles_read_localization(getty_t)
# TODO: to allow w to display everyone... # TODO: to allow w to display everyone...
#bool user_ttyfile_stat false; #bool user_ttyfile_stat false;
#if (user_ttyfile_stat) { #if (user_ttyfile_stat) {
#allow userdomain ttyfile:chr_file getattr; #allow userdomain ttyfile:chr_file getattr;
#} #}
# TODO: Run login in local_login_t domain.
#allow getty_t bin_t:dir search;
#domain_auto_trans(getty_t, login_exec_t, local_login_t)
# TODO: There is no interface for this in init.if yet.
#allow getty_t initrc_devpts_t:chr_file { read write };