rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add in use and ignore use init control channel interfaces

This commit is contained in:
Chris PeBenito 2005-05-02 18:40:05 +00:00
parent ba7740d145
commit d0b6abebb9
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
refpolicy/policy/modules/system/init.if
View File

@ -32,6 +32,35 @@ type initctl_t;
class fifo_file getattr;
')
########################################
#
# init_use_control_channel(domain)
#
define(`init_use_control_channel',`
requires_block_template(init_use_control_channel_depend)
allow $1 initctl_t:fifo_file { getattr read write };
devices_list_device_nodes($1)
')
define(`init_use_control_channel_depend',`
type initctl_t;
class fifo_file { getattr read write };
')
########################################
#
# init_ignore_use_control_channel(domain)
#
define(`init_ignore_use_control_channel',`
requires_block_template(init_ignore_use_control_channel_depend)
dontaudit $1 initctl_t:fifo_file { read write };
')
define(`init_ignore_use_control_channel_depend',`
type initctl_t;
class fifo_file { read write };
')
########################################
#
# init_sigchld(domain,[`optional'])