Attachment 941684 Details for Bug 1145640 – type enforcement file

type enforcement file

hostapd.te (text/plain), 1.86 KB, created by Alphonse Steiner on 2014-09-26 18:43:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alphonse Steiner

Created: 2014-09-26 18:43:56 UTC

Size: 1.86 KB

patch

obsolete

>policy_module(hostapd, 1.0.4)
>
>########################################
>#
># Declarations
>#
>
>type hostapd_t;
>type hostapd_exec_t;
>init_daemon_domain(hostapd_t, hostapd_exec_t)
>
>type hostapd_unit_file_t;
>systemd_unit_file(hostapd_unit_file_t)
>
>type hostapd_var_run_t;
>files_pid_file(hostapd_var_run_t)
>
>
>########################################
>#
># hostapd local policy
>#
>allow hostapd_t self:fifo_file rw_fifo_file_perms;
>allow hostapd_t self:unix_stream_socket create_stream_socket_perms;
>
>domain_use_interactive_fds(hostapd_t)
>files_read_etc_files(hostapd_t)
>logging_send_syslog_msg(hostapd_t)
>miscfiles_read_localization(hostapd_t)
>auth_read_passwd(hostapd_t)
>
>manage_dirs_pattern(hostapd_t, hostapd_var_run_t, hostapd_var_run_t)
>manage_files_pattern(hostapd_t, hostapd_var_run_t, hostapd_var_run_t)
>manage_sock_files_pattern(hostapd_t, hostapd_var_run_t, hostapd_var_run_t)
>files_pid_filetrans(hostapd_t, hostapd_var_run_t, { dir file sock_file })
>
>kernel_request_load_module(hostapd_t)
>dev_read_rand(hostapd_t)
>dev_read_urand(hostapd_t)
>dev_read_sysfs(hostapd_t)
>dev_rw_wireless(hostapd_t)
>require {
>		type proc_t; # missing genrequire in the interface
>		class file {read_file_perms};
>}
>kernel_search_network_state(hostapd_t)
>allow hostapd_t proc_net_t:file { read_file_perms };
>
>
>require {
>        class udp_socket { create_socket_perms };
>        class packet_socket { create_socket_perms };
>        class netlink_socket { create_socket_perms };
>        class netlink_route_socket { create_netlink_socket_perms };
>        class capability { net_admin net_raw chown fsetid };
>}
>
>allow hostapd_t self:capability { net_admin net_raw chown fsetid };
>allow hostapd_t self:netlink_route_socket { create_netlink_socket_perms };
>allow hostapd_t self:netlink_socket { create_socket_perms };
>allow hostapd_t self:packet_socket { create_socket_perms };
>allow hostapd_t self:udp_socket { create_socket_perms };
>

Actions: View

Attachments on bug 1145640: 941684 | 941685