rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

more consolekit updates from dan

Browse Source
This commit is contained in:
Chris PeBenito 2007-04-11 14:04:35 +00:00
parent 82e284bb89
commit 99064c9fbd
2 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policy/modules/services/consolekit.fc
View File

@ -1 +1,3 @@
/usr/sbin/console-kit-daemon -- gen_context(system_u:object_r:consolekit_exec_t,s0) /usr/sbin/console-kit-daemon -- gen_context(system_u:object_r:consolekit_exec_t,s0)
/var/run/consolekit.pid -- gen_context(system_u:object_r:consolekit_var_run_t,s0)

18
policy/modules/services/consolekit.te
View File

@ -1,5 +1,5 @@
policy_module(consolekit,1.0.1) policy_module(consolekit,1.0.2)
######################################## ########################################
# #
@ -10,16 +10,24 @@ type consolekit_t;
type consolekit_exec_t; type consolekit_exec_t;
init_daemon_domain(consolekit_t, consolekit_exec_t) init_daemon_domain(consolekit_t, consolekit_exec_t)
# pid files
type consolekit_var_run_t;
files_pid_file(consolekit_var_run_t)
######################################## ########################################
# #
# consolekit local policy # consolekit local policy
# #
allow consolekit_t self:capability { sys_tty_config dac_override sys_nice sys_ptrace }; allow consolekit_t self:capability { sys_tty_config dac_override sys_nice sys_ptrace };
allow consolekit_t self:process getsched; allow consolekit_t self:process { getsched signal };
allow consolekit_t self:fifo_file rw_fifo_file_perms; allow consolekit_t self:fifo_file rw_fifo_file_perms;
allow consolekit_t self:unix_stream_socket create_stream_socket_perms; allow consolekit_t self:unix_stream_socket create_stream_socket_perms;
# pid file
manage_files_pattern(consolekit_t,consolekit_var_run_t,consolekit_var_run_t)
files_pid_filetrans(consolekit_t,consolekit_var_run_t, file)
dev_read_urand(consolekit_t) dev_read_urand(consolekit_t)
dev_read_sysfs(consolekit_t) dev_read_sysfs(consolekit_t)
@ -28,6 +36,8 @@ domain_use_interactive_fds(consolekit_t)
files_read_etc_files(consolekit_t) files_read_etc_files(consolekit_t)
term_use_console(consolekit_t)
libs_use_ld_so(consolekit_t) libs_use_ld_so(consolekit_t)
libs_use_shared_libs(consolekit_t) libs_use_shared_libs(consolekit_t)
@ -44,4 +54,8 @@ optional_policy(`
dbus_connect_system_bus(consolekit_t) dbus_connect_system_bus(consolekit_t)
hal_dbus_chat(consolekit_t) hal_dbus_chat(consolekit_t)
optional_policy(`
unconfined_dbus_chat(consolekit_t)
')
') ')