diff --git a/policy/modules/kernel/terminal.if b/policy/modules/kernel/terminal.if index 38b493a7..f89eaba0 100644 --- a/policy/modules/kernel/terminal.if +++ b/policy/modules/kernel/terminal.if @@ -153,6 +153,29 @@ interface(`term_create_pty',` type_transition $1 devpts_t:chr_file $2; ') +######################################## +## +## Write the console, all +## ttys and all ptys. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`term_write_all_terms',` + gen_require(` + attribute ttynode, ptynode; + type console_device_t, devpts_t, tty_device_t; + ') + + dev_list_all_dev_nodes($1) + allow $1 devpts_t:dir list_dir_perms; + allow $1 { console_device_t tty_device_t ttynode ptynode }:chr_file write_chr_file_perms; +') + ######################################## ## ## Read and write the console, all