Skip to content

Commit

Permalink
Create boltd_var_run_t type for boltd pid files
Browse files Browse the repository at this point in the history
  • Loading branch information
wrabcak committed Sep 26, 2018
1 parent cfdd5a1 commit 45d6e80
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions boltd.te
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,9 @@ init_daemon_domain(boltd_t, boltd_exec_t)
type boltd_var_lib_t;
files_type(boltd_var_lib_t)

type boltd_var_run_t;
files_pid_file(boltd_var_run_t)

########################################
#
# boltd local policy
Expand All @@ -26,13 +29,21 @@ manage_files_pattern(boltd_t, boltd_var_lib_t, boltd_var_lib_t)
manage_lnk_files_pattern(boltd_t, boltd_var_lib_t, boltd_var_lib_t)
files_var_lib_filetrans(boltd_t, boltd_var_lib_t, { dir file lnk_file })

manage_dirs_pattern(boltd_t, boltd_var_run_t, boltd_var_run_t)
manage_files_pattern(boltd_t, boltd_var_run_t, boltd_var_run_t)
manage_fifo_files_pattern(boltd_t, boltd_var_run_t, boltd_var_run_t)
files_var_lib_filetrans(boltd_t, boltd_var_run_t, { dir file fifo_file })

kernel_dgram_send(boltd_t)

auth_use_nsswitch(boltd_t)

dev_list_sysfs(boltd_t)
dev_rw_sysfs(boltd_t)

files_mmap_usr_files(boltd_t)
fs_getattr_tmpfs(boltd_t)

logging_send_syslog_msg(boltd_t)
logging_stream_connect_syslog(boltd_t)

Expand Down

0 comments on commit 45d6e80

Please sign in to comment.