diff options
| author |   Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-12-29 16:51:54 +0100 |
|---|---|---|
| committer | Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-12-29 16:51:54 +0100 |
| commit | 16b663c51f91abc7f030dceac7189574eac38ef8 (patch) | |
| tree | 197f836367b8009c93681ea97a064118ad80e1e2 /policy/modules/system/udev.if | |
| parent | Move majority of gentoo specifics downwards (diff) | |
| download | hardened-refpolicy-16b663c51f91abc7f030dceac7189574eac38ef8.tar.gz hardened-refpolicy-16b663c51f91abc7f030dceac7189574eac38ef8.tar.bz2 hardened-refpolicy-16b663c51f91abc7f030dceac7189574eac38ef8.zip | |
Support a file transition from udev_var_run_t to udev_rules_t
This will be used later by the initrc_t domain.
Diffstat (limited to 'policy/modules/system/udev.if')
| -rw-r--r-- | policy/modules/system/udev.if | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/policy/modules/system/udev.if b/policy/modules/system/udev.if index c38f9b357..85b8d4a15 100644 --- a/policy/modules/system/udev.if +++ b/policy/modules/system/udev.if @@ -392,3 +392,34 @@ interface(`udev_manage_pid_files',` interface(`udev_generic_pid_filetrans_run_dirs',` refpolicywarn(`$0($*) has been deprecated.') ') + +# Gentoo specific but cannot add it within an ifdef distro_gentoo + +######################################### +## <summary> +## Write in /var/run/udev with the udev_rules_t (udev rules) file type +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +## <param name="class"> +## <summary> +## Classes on which the file transition should occur +## </summary> +## </param> +## <param name="name" optional="true"> +## <summary> +## Name of the directory that the file transition will work on +## </summary> +## </param> +# +interface(`udev_pid_filetrans_rules',` + gen_require(` + type udev_rules_t; + type udev_var_run_t; + ') + + filetrans_pattern($1, udev_var_run_t, udev_rules_t, $2, $3) +') |