RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Lircd patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2010-04-20 10:33:27 -04:00
parent e07fbc004d
commit 05a2e3e2d7
2 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
policy/modules/kernel/corenetwork.te.in
View File

@ -1,5 +1,5 @@
policy_module(corenetwork, 1.13.10) policy_module(corenetwork, 1.13.11)
######################################## ########################################
# #
@ -131,6 +131,7 @@ network_port(kismet, tcp,2501,s0)
network_port(kprop, tcp,754,s0) network_port(kprop, tcp,754,s0)
network_port(ktalkd, udp,517,s0, udp,518,s0) network_port(ktalkd, udp,517,s0, udp,518,s0)
network_port(ldap, tcp,389,s0, udp,389,s0, tcp,636,s0, udp,636,s0, tcp,3268,s0) network_port(ldap, tcp,389,s0, udp,389,s0, tcp,636,s0, udp,636,s0, tcp,3268,s0)
network_port(lirc, tcp,8765,s0)
network_port(lmtp, tcp,24,s0, udp,24,s0) network_port(lmtp, tcp,24,s0, udp,24,s0)
type lrrd_port_t, port_type; dnl network_port(lrrd_port_t) # no defined portcon type lrrd_port_t, port_type; dnl network_port(lrrd_port_t) # no defined portcon
network_port(mail, tcp,2000,s0, tcp,3905,s0) network_port(mail, tcp,2000,s0, tcp,3905,s0)

15
policy/modules/services/lircd.te
View File

@ -1,5 +1,5 @@
policy_module(lircd, 1.0.1) policy_module(lircd, 1.0.2)
######################################## ########################################
# #
@ -24,8 +24,10 @@ files_pid_file(lircd_var_run_t)
# lircd local policy # lircd local policy
# #
allow lircd_t self:process signal; allow lircd_t self:capability { chown kill sys_admin };
allow lircd_t self:fifo_file rw_fifo_file_perms;
allow lircd_t self:unix_dgram_socket create_socket_perms; allow lircd_t self:unix_dgram_socket create_socket_perms;
allow lircd_t self:tcp_socket create_stream_socket_perms;
# etc file # etc file
read_files_pattern(lircd_t, lircd_etc_t, lircd_etc_t) read_files_pattern(lircd_t, lircd_etc_t, lircd_etc_t)
@ -37,7 +39,14 @@ files_pid_filetrans(lircd_t, lircd_var_run_t, { dir file })
# /dev/lircd socket # /dev/lircd socket
dev_filetrans(lircd_t, lircd_var_run_t, sock_file) dev_filetrans(lircd_t, lircd_var_run_t, sock_file)
corenet_tcp_sendrecv_generic_if(lircd_t)
corenet_tcp_bind_generic_node(lircd_t)
corenet_tcp_bind_lirc_port(lircd_t)
corenet_tcp_sendrecv_all_ports(lircd_t)
corenet_tcp_connect_lirc_port(lircd_t)
dev_read_generic_usb_dev(lircd_t) dev_read_generic_usb_dev(lircd_t)
dev_read_mouse(lircd_t)
dev_filetrans_lirc(lircd_t) dev_filetrans_lirc(lircd_t)
dev_rw_lirc(lircd_t) dev_rw_lirc(lircd_t)
dev_rw_input_dev(lircd_t) dev_rw_input_dev(lircd_t)
@ -52,3 +61,5 @@ term_use_ptmx(lircd_t)
logging_send_syslog_msg(lircd_t) logging_send_syslog_msg(lircd_t)
miscfiles_read_localization(lircd_t) miscfiles_read_localization(lircd_t)
sysnet_dns_name_resolve(lircd_t)