add admin_process_pattern macro

useful for MODULE_admin interfaces
2017-02-17 16:26:22 +01:00 · 2017-02-17 16:26:22 +01:00 · dd4cfd8a77
parent d9980666a4
commit dd4cfd8a77
1 changed files with 13 additions and 0 deletions
--- a/policy/support/misc_patterns.spt
+++ b/policy/support/misc_patterns.spt
@ -98,3 +98,16 @@ define(`ps_process_pattern',`
 	allow $1 $2:lnk_file read_lnk_file_perms;
 	allow $1 $2:process getattr;
 ')
+
+#
+# Process administration pattern
+#
+# Parameters:
+# 1. source domain
+# 2. target domain
+#
+define(`admin_process_pattern',`
+	ps_process_pattern($1, $2)
+
+	allow $1 $2:process { ptrace signal_perms };
+')