36 lines
712 B
Plaintext
36 lines
712 B
Plaintext
|
|
policy_module(podsleuth, 1.1.0)
|
|
|
|
########################################
|
|
#
|
|
# Declarations
|
|
#
|
|
|
|
type podsleuth_t;
|
|
type podsleuth_exec_t;
|
|
application_domain(podsleuth_t, podsleuth_exec_t)
|
|
role system_r types podsleuth_t;
|
|
|
|
########################################
|
|
#
|
|
# podsleuth local policy
|
|
#
|
|
|
|
allow podsleuth_t self:process { signal getsched execheap execmem };
|
|
allow podsleuth_t self:fifo_file rw_file_perms;
|
|
allow podsleuth_t self:unix_stream_socket create_stream_socket_perms;
|
|
|
|
kernel_read_system_state(podsleuth_t)
|
|
|
|
dev_read_urand(podsleuth_t)
|
|
|
|
files_read_etc_files(podsleuth_t)
|
|
|
|
miscfiles_read_localization(podsleuth_t)
|
|
|
|
dbus_system_bus_client(podsleuth_t)
|
|
|
|
mono_exec(podsleuth_t)
|
|
|
|
hal_dbus_chat(podsleuth_t)
|