Permission to get attributes of target devicekit_t, devicekit_disk_t and devicekit_power_t domains are included with ps_process_patterns.
Signed-off-by: Dominick Grift <domg472@gmail.com>
This commit is contained in:
parent
5ecaacae61
commit
47cf98ddd5
@ -165,13 +165,13 @@ interface(`devicekit_admin',`
|
||||
type devicekit_var_lib_t, devicekit_var_run_t, devicekit_tmp_t;
|
||||
')
|
||||
|
||||
allow $1 devicekit_t:process { ptrace signal_perms getattr };
|
||||
allow $1 devicekit_t:process { ptrace signal_perms };
|
||||
ps_process_pattern($1, devicekit_t)
|
||||
|
||||
allow $1 devicekit_disk_t:process { ptrace signal_perms getattr };
|
||||
allow $1 devicekit_disk_t:process { ptrace signal_perms };
|
||||
ps_process_pattern($1, devicekit_disk_t)
|
||||
|
||||
allow $1 devicekit_power_t:process { ptrace signal_perms getattr };
|
||||
allow $1 devicekit_power_t:process { ptrace signal_perms };
|
||||
ps_process_pattern($1, devicekit_power_t)
|
||||
|
||||
admin_pattern($1, devicekit_tmp_t)
|
||||
|
Loading…
Reference in New Issue
Block a user