68ac47d8c5
Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes.
54 lines
1.3 KiB
Plaintext
54 lines
1.3 KiB
Plaintext
policy_module(clogd, 1.0.0)
|
|
|
|
########################################
|
|
#
|
|
# Declarations
|
|
#
|
|
|
|
type clogd_t;
|
|
type clogd_exec_t;
|
|
init_daemon_domain(clogd_t, clogd_exec_t)
|
|
|
|
type clogd_tmpfs_t;
|
|
files_tmpfs_file(clogd_tmpfs_t)
|
|
|
|
# pid files
|
|
type clogd_var_run_t;
|
|
files_pid_file(clogd_var_run_t)
|
|
|
|
########################################
|
|
#
|
|
# clogd local policy
|
|
#
|
|
|
|
allow clogd_t self:capability { net_admin mknod };
|
|
allow clogd_t self:process signal;
|
|
allow clogd_t self:sem create_sem_perms;
|
|
allow clogd_t self:shm create_shm_perms;
|
|
allow clogd_t self:netlink_socket create_socket_perms;
|
|
allow clogd_t self:unix_dgram_socket create_socket_perms;
|
|
|
|
manage_dirs_pattern(clogd_t, clogd_tmpfs_t, clogd_tmpfs_t)
|
|
manage_files_pattern(clogd_t, clogd_tmpfs_t, clogd_tmpfs_t)
|
|
fs_tmpfs_filetrans(clogd_t, clogd_tmpfs_t, { dir file })
|
|
|
|
# pid files
|
|
manage_files_pattern(clogd_t, clogd_var_run_t, clogd_var_run_t)
|
|
manage_sock_files_pattern(clogd_t, clogd_var_run_t, clogd_var_run_t)
|
|
files_pid_filetrans(clogd_t, clogd_var_run_t, { file })
|
|
|
|
dev_read_lvm_control(clogd_t)
|
|
dev_manage_generic_blk_files(clogd_t)
|
|
|
|
storage_raw_read_fixed_disk(clogd_t)
|
|
storage_raw_write_fixed_disk(clogd_t)
|
|
|
|
logging_send_syslog_msg(clogd_t)
|
|
|
|
miscfiles_read_localization(clogd_t)
|
|
|
|
optional_policy(`
|
|
aisexec_stream_connect(clogd_t)
|
|
corosync_stream_connect(clogd_t)
|
|
')
|