diff options
| author |   Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-04-21 20:07:46 +0200 |
|---|---|---|
| committer | Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-04-21 20:07:46 +0200 |
| commit | 3962a6834f4e7ef04441de4f3134ff329d8602f9 (patch) | |
| tree | cae07463edd5b609a97513e00d63e1bd410cc8bb /policy/modules/system/udev.fc | |
| parent | Initial commit (diff) | |
| download | hardened-refpolicy-3962a6834f4e7ef04441de4f3134ff329d8602f9.tar.gz hardened-refpolicy-3962a6834f4e7ef04441de4f3134ff329d8602f9.tar.bz2 hardened-refpolicy-3962a6834f4e7ef04441de4f3134ff329d8602f9.zip | |
Pushing 2.20120215 (current version)
Diffstat (limited to 'policy/modules/system/udev.fc')
| -rw-r--r-- | policy/modules/system/udev.fc | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/policy/modules/system/udev.fc b/policy/modules/system/udev.fc new file mode 100644 index 00000000..25753937 --- /dev/null +++ b/policy/modules/system/udev.fc @@ -0,0 +1,36 @@ +/dev/\.udev(/.*)? -- gen_context(system_u:object_r:udev_tbl_t,s0) +/dev/\.udevdb -- gen_context(system_u:object_r:udev_tbl_t,s0) +/dev/udev\.tbl -- gen_context(system_u:object_r:udev_tbl_t,s0) + +/etc/dev\.d/.+ -- gen_context(system_u:object_r:udev_helper_exec_t,s0) + +/etc/hotplug\.d/default/udev.* -- gen_context(system_u:object_r:udev_helper_exec_t,s0) + +/etc/udev/rules.d(/.*)? gen_context(system_u:object_r:udev_rules_t,s0) +/etc/udev/scripts/.+ -- gen_context(system_u:object_r:udev_helper_exec_t,s0) + +/lib/udev/udev-acl -- gen_context(system_u:object_r:udev_exec_t,s0) + +ifdef(`distro_debian',` +/lib/udev/create_static_nodes -- gen_context(system_u:object_r:udev_exec_t,s0) +') + +/sbin/udev -- gen_context(system_u:object_r:udev_exec_t,s0) +/sbin/udevadm -- gen_context(system_u:object_r:udev_exec_t,s0) +/sbin/udevd -- gen_context(system_u:object_r:udev_exec_t,s0) +/sbin/udevsend -- gen_context(system_u:object_r:udev_exec_t,s0) +/sbin/udevstart -- gen_context(system_u:object_r:udev_exec_t,s0) +/sbin/wait_for_sysfs -- gen_context(system_u:object_r:udev_exec_t,s0) + +ifdef(`distro_redhat',` +/sbin/start_udev -- gen_context(system_u:object_r:udev_exec_t,s0) +') + +/usr/bin/udevinfo -- gen_context(system_u:object_r:udev_exec_t,s0) + +/var/run/PackageKit/udev(/.*)? gen_context(system_u:object_r:udev_var_run_t,s0) +/var/run/udev(/.*)? gen_context(system_u:object_r:udev_tbl_t,s0) + +ifdef(`distro_debian',` +/var/run/xen-hotplug -d gen_context(system_u:object_r:udev_var_run_t,s0) +') |