diff options
Diffstat (limited to 'policy/modules/contrib/kdump.te')
-rw-r--r-- | policy/modules/contrib/kdump.te | 116 |
1 files changed, 0 insertions, 116 deletions
diff --git a/policy/modules/contrib/kdump.te b/policy/modules/contrib/kdump.te deleted file mode 100644 index 70f30078d..000000000 --- a/policy/modules/contrib/kdump.te +++ /dev/null @@ -1,116 +0,0 @@ -policy_module(kdump, 1.2.3) - -####################################### -# -# Declarations -# - -type kdump_t; -type kdump_exec_t; -init_system_domain(kdump_t, kdump_exec_t) - -type kdump_etc_t; -files_config_file(kdump_etc_t) - -type kdump_initrc_exec_t; -init_script_file(kdump_initrc_exec_t) - -type kdumpctl_t; -type kdumpctl_exec_t; -init_daemon_domain(kdumpctl_t, kdumpctl_exec_t) -application_executable_file(kdumpctl_exec_t) - -type kdumpctl_tmp_t; -files_tmp_file(kdumpctl_tmp_t) - -##################################### -# -# Local policy -# - -allow kdump_t self:capability { sys_boot dac_override }; - -allow kdump_t kdump_etc_t:file read_file_perms; - -files_read_etc_files(kdump_t) -files_read_etc_runtime_files(kdump_t) -files_read_kernel_img(kdump_t) - -kernel_read_core_if(kdump_t) -kernel_read_debugfs(kdump_t) -kernel_read_system_state(kdump_t) -kernel_request_load_module(kdump_t) - -dev_read_framebuffer(kdump_t) -dev_read_sysfs(kdump_t) - -term_use_console(kdump_t) - -####################################### -# -# Ctl local policy -# - -allow kdumpctl_t self:capability { dac_override sys_chroot }; -allow kdumpctl_t self:process setfscreate; -allow kdumpctl_t self:fifo_file rw_fifo_file_perms; -allow kdumpctl_t self:unix_stream_socket { accept listen }; - -allow kdumpctl_t kdump_etc_t:file read_file_perms; - -manage_dirs_pattern(kdumpctl_t, kdumpctl_tmp_t, kdumpctl_tmp_t) -manage_files_pattern(kdumpctl_t, kdumpctl_tmp_t, kdumpctl_tmp_t) -manage_lnk_files_pattern(kdumpctl_t, kdumpctl_tmp_t, kdumpctl_tmp_t) -files_tmp_filetrans(kdumpctl_t, kdumpctl_tmp_t, { file dir lnk_file }) - -domtrans_pattern(kdumpctl_t, kdump_exec_t, kdump_t) - -kernel_read_system_state(kdumpctl_t) - -corecmd_exec_bin(kdumpctl_t) -corecmd_exec_shell(kdumpctl_t) - -dev_read_sysfs(kdumpctl_t) -dev_manage_all_dev_nodes(kdumpctl_t) - -domain_use_interactive_fds(kdumpctl_t) - -files_create_kernel_img(kdumpctl_t) -files_read_etc_files(kdumpctl_t) -files_read_etc_runtime_files(kdumpctl_t) -files_read_usr_files(kdumpctl_t) -files_read_kernel_modules(kdumpctl_t) -files_getattr_all_dirs(kdumpctl_t) - -fs_getattr_all_fs(kdumpctl_t) -fs_search_all(kdumpctl_t) - -init_domtrans_script(kdumpctl_t) -init_exec(kdumpctl_t) - -libs_exec_ld_so(kdumpctl_t) - -logging_send_syslog_msg(kdumpctl_t) - -miscfiles_read_localization(kdumpctl_t) - -optional_policy(` - gpg_exec(kdumpctl_t) -') - -optional_policy(` - lvm_read_config(kdumpctl_t) -') - -optional_policy(` - modutils_domtrans_insmod(kdumpctl_t) - modutils_read_module_config(kdumpctl_t) -') - -optional_policy(` - plymouthd_domtrans_plymouth(kdumpctl_t) -') - -optional_policy(` - ssh_exec(kdumpctl_t) -') |