selinux-policy/mls/domains/program/sound.te
2005-11-22 19:28:03 +00:00

27 lines
815 B
Plaintext

#DESC Sound - Sound utilities
#
# Authors: Mark Westerman <mark.westerman@.com>
# X-Debian-Packages: esound
#
#################################
#
# Rules for the sound_t domain.
#
daemon_base_domain(sound)
type sound_file_t, file_type, sysadmfile;
allow initrc_t sound_file_t:file { getattr read };
allow sound_t sound_file_t:file rw_file_perms;
# Use capabilities.
# Commented out by default.
#allow sound_t self:capability { sys_admin sys_rawio sys_time dac_override };
dontaudit sound_t self:capability { sys_admin sys_rawio sys_time dac_read_search dac_override };
# Read and write the sound device.
allow sound_t sound_device_t:chr_file rw_file_perms;
# Read and write ttys.
allow sound_t sysadm_tty_device_t:chr_file rw_file_perms;
read_locale(sound_t)
allow initrc_t sound_file_t:file { setattr write };