add admin_process_pattern macro

useful for MODULE_admin interfaces
This commit is contained in:
cgzones 2017-02-17 16:26:22 +01:00
parent d9980666a4
commit dd4cfd8a77
1 changed files with 13 additions and 0 deletions

View File

@ -98,3 +98,16 @@ define(`ps_process_pattern',`
allow $1 $2:lnk_file read_lnk_file_perms; allow $1 $2:lnk_file read_lnk_file_perms;
allow $1 $2:process getattr; allow $1 $2:process getattr;
') ')
#
# Process administration pattern
#
# Parameters:
# 1. source domain
# 2. target domain
#
define(`admin_process_pattern',`
ps_process_pattern($1, $2)
allow $1 $2:process { ptrace signal_perms };
')