Vbetool patch from Dan Walsh.

This commit is contained in:
Chris PeBenito 2010-02-19 11:34:28 -05:00
parent 4fd0889171
commit 6ae29c7378
1 changed files with 5 additions and 3 deletions

View File

@ -1,5 +1,5 @@
policy_module(vbetool, 1.4.0)
policy_module(vbetool, 1.4.1)
########################################
#
@ -15,13 +15,15 @@ init_system_domain(vbetool_t, vbetool_exec_t)
# Local policy
#
allow vbetool_t self:capability { sys_tty_config sys_admin };
allow vbetool_t self:capability { dac_override sys_tty_config sys_admin };
allow vbetool_t self:process execmem;
dev_wx_raw_memory(vbetool_t)
dev_read_raw_memory(vbetool_t)
dev_rwx_zero(vbetool_t)
dev_read_sysfs(vbetool_t)
dev_rw_sysfs(vbetool_t)
dev_rw_xserver_misc(vbetool_t)
dev_rw_mtrr(vbetool_t)
domain_mmap_low(vbetool_t)