nnd/selinux-refpolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add interface udev_run_domain

Browse Source 
This interface is useful when using the 'RUN' option in UDEV rules where udev will be executing a user executable to perform some action.  This interface allows a domain transition to occur for the run action.

Signed-off-by: Dave Sugar <dsugar@tresys.com>
This commit is contained in:
David Sugar 2018-11-02 00:36:45 +00:00 committed by Chris PeBenito
parent 35463351a0
commit f0047d0247
1 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
policy/modules/system/udev.if
View File

@ -36,6 +36,37 @@ interface(`udev_domtrans',`
domtrans_pattern($1, udev_exec_t, udev_t)
')
########################################
## <summary>
## Allow udev to execute the specified program in
## the specified domain.
## </summary>
## <desc>
## <p>
## This is a interface to support the UDEV 'RUN'
## command. This will allow the command run by
## udev to be run in a domain other than udev_t.
## </p>
## </desc>
## <param name="domain">
## <summary>
## Domain to execute in.
## </summary>
## </param>
## <param name="entry_file">
## <summary>
## Domain entry point file.
## </summary>
## </param>
#
interface(`udev_run_domain',`
gen_require(`
type udev_t;
')
domtrans_pattern(udev_t,$2,$1)
')
########################################
## <summary>
## Execute udev in the caller domain.