selinux-refpolicy/policy/modules/services/iiosensorproxy.te
Russell Coker bc25ff1354 Fixed dependency on unconfined_t
Signed-off-by: Russell Coker <russell@coker.com.au>
2023-09-06 21:12:23 +10:00

74 lines
1.7 KiB
Plaintext

policy_module(iiosensorproxy)
########################################
#
# iio-sensor-proxy (Debian package iio-sensor-proxy)
# IIO sensors to D-Bus proxy
# Industrial I/O subsystem is intended to provide support for devices
# that in some sense are analog to digital or digital to analog convertors
# .
# Devices that fall into this category are:
# * ADCs
# * Accelerometers
# * Gyros
# * IMUs
# * Capacitance to Digital Converters (CDCs)
# * Pressure Sensors
# * Color, Light and Proximity Sensors
# * Temperature Sensors
# * Magnetometers
# * DACs
# * DDS (Direct Digital Synthesis)
# * PLLs (Phase Locked Loops)
# * Variable/Programmable Gain Amplifiers (VGA, PGA)
########################################
#
# Declarations
#
type iiosensorproxy_t;
type iiosensorproxy_exec_t;
init_daemon_domain(iiosensorproxy_t, iiosensorproxy_exec_t)
########################################
#
# Local policy
#
allow iiosensorproxy_t self:netlink_kobject_uevent_socket { bind create getattr setopt read };
allow iiosensorproxy_t self:process { getsched setsched };
allow iiosensorproxy_t self:unix_dgram_socket { create write };
kernel_read_system_state(iiosensorproxy_t)
dev_read_iio(iiosensorproxy_t)
# for /sys/bus/iio/devices
dev_read_sysfs(iiosensorproxy_t)
# for writing to current_trigger
dev_write_sysfs(iiosensorproxy_t)
dbus_system_bus_client(iiosensorproxy_t)
dbus_connect_system_bus(iiosensorproxy_t)
logging_send_syslog_msg(iiosensorproxy_t)
miscfiles_read_localization(iiosensorproxy_t)
udev_read_runtime_files(iiosensorproxy_t)
optional_policy(`
policykit_dbus_chat(iiosensorproxy_t)
')
optional_policy(`
unconfined_dbus_send(iiosensorproxy_t)
')
optional_policy(`
xserver_dbus_chat_xdm(iiosensorproxy_t)
')