Removed differences between refpolicy and targeted NetworkManager_t

This commit is contained in:
Don Miner 2005-10-24 21:25:02 +00:00
parent 7ebd6a9079
commit 9c4fcf666e
2 changed files with 27 additions and 0 deletions

View File

@ -1 +1,18 @@
## <summary>Bluetooth tools and system services.</summary>
########################################
## <summary>
## Read bluetooth helper files.
## </summary>
## <param name="domain">
## Domain allowed access.
## </param>
#
interface(`bluetooth_read_helper_files',`
gen_require(`
type bluetooth_helper_t;
')
allow $1 bluetooth_helper_t:dir search;
allow $1 bluetooth_helper_t:file { read getattr };
')

View File

@ -111,6 +111,10 @@ ifdef(`targeted_policy', `
files_dontaudit_read_root_file(NetworkManager_t)
')
optional_policy(`bluetooth.te',`
bluetooth_read_helper_files(NetworkManager_t)
')
optional_policy(`consoletype.te',`
consoletype_exec(NetworkManager_t)
')
@ -163,6 +167,12 @@ optional_policy(`dbus.te',`
allow NetworkManager_t initrc_t:dbus send_msg;
allow initrc_t NetworkManager_t:dbus send_msg;
allow NetworkManager_t apmd_t:dbus send_msg;
allow apmd_t NetworkManager_t:dbus send_msg;
allow NetworkManager_t named_t:dbus send_msg;
allow named_t NetworkManager_t:dbus send_msg;
dbus_system_bus_client_template(NetworkManager,NetworkManager_t)
dbus_connect_system_bus(NetworkManager_t)
dbus_send_system_bus_msg(NetworkManager_t)