From f67bc918d441699e199fcfaf54f16529111dc877 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 8 Sep 2009 10:06:38 -0400 Subject: [PATCH] term_write_all_terms() patch from Stefan Schulze Frielinghaus --- policy/modules/kernel/terminal.if | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/policy/modules/kernel/terminal.if b/policy/modules/kernel/terminal.if index 38b493a7..f89eaba0 100644 --- a/policy/modules/kernel/terminal.if +++ b/policy/modules/kernel/terminal.if @@ -153,6 +153,29 @@ interface(`term_create_pty',` type_transition $1 devpts_t:chr_file $2; ') +######################################## +## +## Write the console, all +## ttys and all ptys. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`term_write_all_terms',` + gen_require(` + attribute ttynode, ptynode; + type console_device_t, devpts_t, tty_device_t; + ') + + dev_list_all_dev_nodes($1) + allow $1 devpts_t:dir list_dir_perms; + allow $1 { console_device_t tty_device_t ttynode ptynode }:chr_file write_chr_file_perms; +') + ######################################## ## ## Read and write the console, all