add cpufreqselector from dan
This commit is contained in:
parent
09516cb4be
commit
f4962ab15b
@ -21,6 +21,7 @@
|
||||
- Add kernel_service access vectors, from Stephen Smalley.
|
||||
- Added modules:
|
||||
certmaster (Dan Walsh)
|
||||
cpufreqselector (Dan Walsh)
|
||||
git (Dan Walsh)
|
||||
gpsd (Miroslav Grepl)
|
||||
guest (Dan Walsh)
|
||||
|
1
policy/modules/apps/cpufreqselector.fc
Normal file
1
policy/modules/apps/cpufreqselector.fc
Normal file
@ -0,0 +1 @@
|
||||
/usr/bin/cpufreq-selector -- gen_context(system_u:object_r:cpufreqselector_exec_t,s0)
|
1
policy/modules/apps/cpufreqselector.if
Normal file
1
policy/modules/apps/cpufreqselector.if
Normal file
@ -0,0 +1 @@
|
||||
## <summary>Command-line CPU frequency settings.</summary>
|
42
policy/modules/apps/cpufreqselector.te
Normal file
42
policy/modules/apps/cpufreqselector.te
Normal file
@ -0,0 +1,42 @@
|
||||
|
||||
policy_module(cpufreqselector, 1.0.0)
|
||||
|
||||
########################################
|
||||
#
|
||||
# Declarations
|
||||
#
|
||||
|
||||
type cpufreqselector_t;
|
||||
type cpufreqselector_exec_t;
|
||||
application_domain(cpufreqselector_t, cpufreqselector_exec_t)
|
||||
|
||||
########################################
|
||||
#
|
||||
# cpufreq-selector local policy
|
||||
#
|
||||
|
||||
allow cpufreqselector_t self:capability { sys_nice sys_ptrace };
|
||||
allow cpufreqselector_t self:fifo_file rw_fifo_file_perms;
|
||||
|
||||
files_read_etc_files(cpufreqselector_t)
|
||||
files_read_usr_files(cpufreqselector_t)
|
||||
|
||||
corecmd_search_bin(cpufreqselector_t)
|
||||
|
||||
dev_rw_sysfs(cpufreqselector_t)
|
||||
|
||||
userdom_read_all_users_state(cpufreqselector_t)
|
||||
|
||||
optional_policy(`
|
||||
consolekit_dbus_chat(cpufreqselector_t)
|
||||
')
|
||||
|
||||
optional_policy(`
|
||||
nscd_dontaudit_search_pid(cpufreqselector_t)
|
||||
')
|
||||
|
||||
optional_policy(`
|
||||
policykit_domtrans_auth(cpufreqselector_t)
|
||||
policykit_read_lib(cpufreqselector_t)
|
||||
policykit_read_reload(cpufreqselector_t)
|
||||
')
|
Loading…
Reference in New Issue
Block a user