2020-02-29 21:54:39 +00:00
|
|
|
policy_module(tpm2, 1.1.0)
|
2019-08-05 19:13:02 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
type tpm2_abrmd_t;
|
|
|
|
|
type tpm2_abrmd_exec_t;
|
|
|
|
|
init_daemon_domain(tpm2_abrmd_t, tpm2_abrmd_exec_t)
|
|
|
|
|
|
|
|
|
|
type tpm2_abrmd_unit_t;
|
|
|
|
|
init_unit_file(tpm2_abrmd_unit_t)
|
|
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Local policy
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
allow tpm2_abrmd_t self:process signal;
|
|
|
|
|
allow tpm2_abrmd_t self:unix_stream_socket create_socket_perms;
|
|
|
|
|
|
|
|
|
|
dev_rw_tpm(tpm2_abrmd_t)
|
|
|
|
|
|
|
|
|
|
kernel_read_crypto_sysctls(tpm2_abrmd_t)
|
|
|
|
|
kernel_read_system_state(tpm2_abrmd_t)
|
|
|
|
|
|
|
|
|
|
optional_policy(`
|
|
|
|
|
dbus_system_domain(tpm2_abrmd_t, tpm2_abrmd_exec_t)
|
|
|
|
|
')
|
