78276fc43b
Semodule stopped using this many years ago. The policy_module() macro will continue to support an optional second parameter as version. If it is not specified, a default value of 1 is set. Signed-off-by: Chris PeBenito <pebenito@ieee.org>
40 lines
652 B
Plaintext
40 lines
652 B
Plaintext
policy_module(amtu)
|
|
|
|
########################################
|
|
#
|
|
# Declarations
|
|
#
|
|
|
|
attribute_role amtu_roles;
|
|
|
|
type amtu_t;
|
|
type amtu_exec_t;
|
|
init_system_domain(amtu_t, amtu_exec_t)
|
|
role amtu_roles types amtu_t;
|
|
|
|
type amtu_initrc_exec_t;
|
|
init_script_file(amtu_initrc_exec_t)
|
|
|
|
########################################
|
|
#
|
|
# Local policy
|
|
#
|
|
|
|
kernel_read_system_state(amtu_t)
|
|
|
|
files_manage_boot_files(amtu_t)
|
|
files_read_etc_runtime_files(amtu_t)
|
|
files_read_etc_files(amtu_t)
|
|
|
|
logging_send_audit_msgs(amtu_t)
|
|
|
|
userdom_use_user_terminals(amtu_t)
|
|
|
|
optional_policy(`
|
|
nscd_dontaudit_search_runtime(amtu_t)
|
|
')
|
|
|
|
optional_policy(`
|
|
seutil_use_newrole_fds(amtu_t)
|
|
')
|