Attachment 1472009 Details for Bug 1589086 – third version of bolt policy

third version of bolt policy

file_1589086.txt (text/plain), 1.71 KB, created by Milos Malik on 2018-08-01 07:41:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Milos Malik

Created: 2018-08-01 07:41:39 UTC

Size: 1.71 KB

patch

obsolete

>policy_module(bolt, 1.0.0)
>
>type bolt_t;
>type bolt_exec_t;
>init_daemon_domain(bolt_t, bolt_exec_t)
>
>permissive bolt_t;
>
>type bolt_var_lib_t;
>files_type(bolt_var_lib_t)
>
>allow bolt_t self:fifo_file rw_fifo_file_perms;
>allow bolt_t self:unix_stream_socket create_stream_socket_perms;
>
>manage_dirs_pattern(bolt_t, bolt_var_lib_t, bolt_var_lib_t)
>manage_files_pattern(bolt_t, bolt_var_lib_t, bolt_var_lib_t)
>manage_lnk_files_pattern(bolt_t, bolt_var_lib_t, bolt_var_lib_t)
>files_var_lib_filetrans(bolt_t, bolt_var_lib_t, { dir file lnk_file })
>
>domain_use_interactive_fds(bolt_t)
>
>files_read_etc_files(bolt_t)
>
>miscfiles_read_localization(bolt_t)
>
>require {
>  type kernel_t;
>  type policykit_t;
>  type sysfs_t;
>  type syslogd_var_run_t;
>  type passwd_file_t;
>  type system_dbusd_t;
>  type system_dbusd_var_run_t;
>  class dbus { acquire_svc send_msg };
>  class dir { read };
>  class sock_file { write };
>  class unix_dgram_socket { sendto };
>  class netlink_kobject_uevent_socket { bind create getattr setopt };
>  class unix_stream_socket { connectto };
>}
>
>allow bolt_t kernel_t:unix_dgram_socket sendto;
>allow bolt_t policykit_t:dbus send_msg;
>allow policykit_t bolt_t:dbus send_msg;
>allow bolt_t self:netlink_kobject_uevent_socket { bind create getattr setopt };
>allow bolt_t self:unix_dgram_socket create;
>allow bolt_t sysfs_t:dir read;
>allow bolt_t syslogd_var_run_t:sock_file write;
>
>allow bolt_t passwd_file_t:file { getattr open read };
>allow bolt_t self:capability dac_read_search;
>
>allow bolt_t system_dbusd_t:dbus { acquire_svc send_msg };
>allow bolt_t system_dbusd_t:unix_stream_socket connectto;
>allow bolt_t system_dbusd_var_run_t:sock_file write;
>
>allow init_t bolt_var_lib_t:dir mounton;

Actions: View

Attachments on bug 1589086: 1472009 | 1472010 | 1472012