diff --git a/refpolicy/policy/modules/system/init.if b/refpolicy/policy/modules/system/init.if index 8b2e2f23..60a3bea9 100644 --- a/refpolicy/policy/modules/system/init.if +++ b/refpolicy/policy/modules/system/init.if @@ -32,6 +32,35 @@ type initctl_t; class fifo_file getattr; ') +######################################## +# +# init_use_control_channel(domain) +# +define(`init_use_control_channel',` +requires_block_template(init_use_control_channel_depend) +allow $1 initctl_t:fifo_file { getattr read write }; +devices_list_device_nodes($1) +') + +define(`init_use_control_channel_depend',` +type initctl_t; +class fifo_file { getattr read write }; +') + +######################################## +# +# init_ignore_use_control_channel(domain) +# +define(`init_ignore_use_control_channel',` +requires_block_template(init_ignore_use_control_channel_depend) +dontaudit $1 initctl_t:fifo_file { read write }; +') + +define(`init_ignore_use_control_channel_depend',` +type initctl_t; +class fifo_file { read write }; +') + ######################################## # # init_sigchld(domain,[`optional'])