selinux-refpolicy/policy/modules/admin/ddcprobe.te


policy_module(ddcprobe, 1.2.0)

########################################
#
# Declarations
#

type ddcprobe_t;
type ddcprobe_exec_t;
application_domain(ddcprobe_t, ddcprobe_exec_t)
role system_r types ddcprobe_t;

########################################
#
# Local policy
#

allow ddcprobe_t self:capability { sys_rawio sys_admin };
allow ddcprobe_t self:process execmem;

kernel_read_system_state(ddcprobe_t)
kernel_read_kernel_sysctls(ddcprobe_t)
kernel_change_ring_buffer_level(ddcprobe_t)

files_search_kernel_modules(ddcprobe_t)

corecmd_list_bin(ddcprobe_t)
corecmd_exec_bin(ddcprobe_t)

dev_read_urand(ddcprobe_t)
dev_read_raw_memory(ddcprobe_t)
dev_wx_raw_memory(ddcprobe_t)

files_read_etc_files(ddcprobe_t)
files_read_etc_runtime_files(ddcprobe_t)
files_read_usr_files(ddcprobe_t)

term_use_all_ttys(ddcprobe_t)
term_use_all_ptys(ddcprobe_t)

libs_read_lib_files(ddcprobe_t)

miscfiles_read_localization(ddcprobe_t)

modutils_read_module_deps(ddcprobe_t)

userdom_use_user_terminals(ddcprobe_t)
userdom_use_all_users_fds(ddcprobe_t)

#reh why? this does not seem even necessary to function properly
kudzu_getattr_exec_files(ddcprobe_t)
add ddcprobe 2006-01-04 16:29:11 +00:00
trunk: bump module versions for release. 2008-12-10 19:38:10 +00:00			`policy_module(ddcprobe, 1.2.0)`
add ddcprobe 2006-01-04 16:29:11 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

			`type ddcprobe_t;`
			`type ddcprobe_exec_t;`
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`application_domain(ddcprobe_t, ddcprobe_exec_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00			`role system_r types ddcprobe_t;`

			`########################################`
			`#`
			`# Local policy`
			`#`

			`allow ddcprobe_t self:capability { sys_rawio sys_admin };`
			`allow ddcprobe_t self:process execmem;`

			`kernel_read_system_state(ddcprobe_t)`
renaming from 20060131 interface review, round 2 2006-01-31 16:49:43 +00:00			`kernel_read_kernel_sysctls(ddcprobe_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00			`kernel_change_ring_buffer_level(ddcprobe_t)`

make (almost) all interface parameters required. move boot_t, system_map_t, and modules_object_t to files module. fd use interface renames, udp sendto interface renames. 2006-03-02 23:41:11 +00:00			`files_search_kernel_modules(ddcprobe_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00
			`corecmd_list_bin(ddcprobe_t)`
Merge sbin_t and ls_exec_t into bin_t. 2007-03-23 23:24:59 +00:00			`corecmd_exec_bin(ddcprobe_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00
			`dev_read_urand(ddcprobe_t)`
			`dev_read_raw_memory(ddcprobe_t)`
			`dev_wx_raw_memory(ddcprobe_t)`

			`files_read_etc_files(ddcprobe_t)`
			`files_read_etc_runtime_files(ddcprobe_t)`
			`files_read_usr_files(ddcprobe_t)`

Remove concept of user from terminal module interfaces dealing with ptynode and ttynode since these attributes are not specific to users. 2010-02-11 19:20:10 +00:00			`term_use_all_ttys(ddcprobe_t)`
			`term_use_all_ptys(ddcprobe_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00
another slew of renaming 2006-02-02 21:08:12 +00:00			`libs_read_lib_files(ddcprobe_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00
			`miscfiles_read_localization(ddcprobe_t)`

another slew of renaming 2006-02-02 21:08:12 +00:00			`modutils_read_module_deps(ddcprobe_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00
trunk: merge UBAC. 2008-11-05 16:10:46 +00:00			`userdom_use_user_terminals(ddcprobe_t)`
another round of renaming 2006-02-20 21:33:25 +00:00			`userdom_use_all_users_fds(ddcprobe_t)`
add ddcprobe 2006-01-04 16:29:11 +00:00
			`#reh why? this does not seem even necessary to function properly`
another slew of renaming 2006-02-02 21:08:12 +00:00			`kudzu_getattr_exec_files(ddcprobe_t)`