nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add interface to run cdrecord in caller domain

Browse Source 
Signed-off-by: Dave Sugar <dsugar@tresys.com>
This commit is contained in:
Sugar, David 2019-02-18 20:00:30 +00:00 committed by Chris PeBenito
parent b3cbf00cba
commit 31ac26dd58
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
policy/modules/apps/cdrecord.if
View File

@ -30,3 +30,22 @@ interface(`cdrecord_role',`
allow $2 cdrecord_t:process { ptrace signal_perms };
ps_process_pattern($2, cdrecord_t)
')
########################################
## <summary>
## Execute cdrecord in the caller domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`cdrecord_exec',`
gen_require(`
type cdrecord_exec_t;
')
corecmd_search_bin($1)
can_exec($1, cdrecord_exec_t)
')