selinux-refpolicy/strict/domains/program/unused/audio-entropyd.te

13 lines
347 B
Plaintext

#DESC audio-entropyd - Generate entropy from audio input
#
# Author: Chris PeBenito <pebenito@gentoo.org>
#
daemon_domain(entropyd)
allow entropyd_t self:capability { ipc_lock sys_admin };
allow entropyd_t random_device_t:chr_file rw_file_perms;
allow entropyd_t device_t:dir r_dir_perms;
allow entropyd_t sound_device_t:chr_file r_file_perms;