Application patch from Dan Walsh.
This commit is contained in:
parent
dccbb80cb0
commit
5ed061769e
@ -99,5 +99,23 @@ interface(`application_exec_all',`
|
|||||||
interface(`application_domain',`
|
interface(`application_domain',`
|
||||||
application_type($1)
|
application_type($1)
|
||||||
application_executable_file($2)
|
application_executable_file($2)
|
||||||
domain_entry_file($1,$2)
|
domain_entry_file($1, $2)
|
||||||
|
')
|
||||||
|
|
||||||
|
########################################
|
||||||
|
## <summary>
|
||||||
|
## Send signull to all application domains.
|
||||||
|
## </summary>
|
||||||
|
## <param name="domain">
|
||||||
|
## <summary>
|
||||||
|
## Domain allowed access.
|
||||||
|
## </summary>
|
||||||
|
## </param>
|
||||||
|
#
|
||||||
|
interface(`application_signull',`
|
||||||
|
gen_require(`
|
||||||
|
attribute application_domain_type;
|
||||||
|
')
|
||||||
|
|
||||||
|
allow $1 application_domain_type:process signull;
|
||||||
')
|
')
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
|
|
||||||
policy_module(application, 1.1.0)
|
policy_module(application, 1.1.1)
|
||||||
|
|
||||||
# Attribute of user applications
|
# Attribute of user applications
|
||||||
attribute application_domain_type;
|
attribute application_domain_type;
|
||||||
@ -11,3 +11,7 @@ optional_policy(`
|
|||||||
ssh_sigchld(application_domain_type)
|
ssh_sigchld(application_domain_type)
|
||||||
ssh_rw_stream_sockets(application_domain_type)
|
ssh_rw_stream_sockets(application_domain_type)
|
||||||
')
|
')
|
||||||
|
|
||||||
|
optional_policy(`
|
||||||
|
sudo_sigchld(application_domain_type)
|
||||||
|
')
|
||||||
|
Loading…
Reference in New Issue
Block a user