diff --git a/refpolicy/policy/modules/kernel/terminal.if b/refpolicy/policy/modules/kernel/terminal.if index e1002e55..6c741e15 100644 --- a/refpolicy/policy/modules/kernel/terminal.if +++ b/refpolicy/policy/modules/kernel/terminal.if @@ -55,6 +55,22 @@ type console_device_t; class chr_file { read write }; ') +######################################## +# +# terminal_set_console_attributes(domain,[`optional']) +# +define(`terminal_set_console_attributes',` +requires_block_template(terminal_set_console_attributes_depend,$2) +devices_list_device_nodes($1,optional) +allow $1 console_device_t:chr_file setattr; +') + +define(`terminal_set_console_attributes_depend',` +type console_device_t; +class chr_file setattr; +devices_list_device_nodes_depend +') + ######################################## # # terminal_use_controlling_terminal(domain,[`optional'])