## Advanced Linux Sound Architecture. ######################################## ## ## Execute a domain transition to ## run Alsa. ## ## ## ## Domain allowed to transition. ## ## # interface(`alsa_domtrans',` gen_require(` type alsa_t, alsa_exec_t; ') domtrans_pattern($1, alsa_exec_t, alsa_t) corecmd_search_bin($1) ') ######################################## ## ## Read and write Alsa semaphores. ## ## ## ## Domain allowed access. ## ## # interface(`alsa_rw_semaphores',` gen_require(` type alsa_t; ') allow $1 alsa_t:sem rw_sem_perms; ') ######################################## ## ## Read and write Alsa shared memory. ## ## ## ## Domain allowed access. ## ## # interface(`alsa_rw_shared_mem',` gen_require(` type alsa_t; ') allow $1 alsa_t:shm rw_shm_perms; ') ######################################## ## ## Read Alsa writable config files. ## ## ## ## Domain allowed access. ## ## # interface(`alsa_read_rw_config',` gen_require(` type alsa_etc_rw_t; ') allow $1 alsa_etc_rw_t:dir list_dir_perms; read_files_pattern($1, alsa_etc_rw_t, alsa_etc_rw_t) read_lnk_files_pattern($1, alsa_etc_rw_t, alsa_etc_rw_t) files_search_etc($1) ') ######################################## ## ## Manage Alsa writable config files. ## ## ## ## Domain allowed access. ## ## # interface(`alsa_manage_rw_config',` gen_require(` type alsa_etc_rw_t; ') allow $1 alsa_etc_rw_t:dir list_dir_perms; manage_files_pattern($1, alsa_etc_rw_t, alsa_etc_rw_t) read_lnk_files_pattern($1, alsa_etc_rw_t, alsa_etc_rw_t) files_search_etc($1) ') ######################################## ## ## Read Alsa lib files. ## ## ## ## Domain allowed access. ## ## # interface(`alsa_read_lib',` gen_require(` type alsa_var_lib_t; ') read_files_pattern($1, alsa_var_lib_t, alsa_var_lib_t) files_search_var_lib($1) ') ######################################## ## ## Read Alsa home files. ## ## ## ## Domain allowed access. ## ## # interface(`alsa_read_home_files',` gen_require(` type alsa_home_t; ') allow $1 alsa_home_t:file read_file_perms; userdom_search_user_home_dirs($1) ')