aboutsummaryrefslogtreecommitdiff
blob: 28d2abc03b8628c83684d62feb544d06ffd4129c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
policy_module(ptchown, 1.2.0)

########################################
#
# Declarations
#

attribute_role ptchown_roles;
roleattribute system_r ptchown_roles;

type ptchown_t;
type ptchown_exec_t;
application_domain(ptchown_t, ptchown_exec_t)
role ptchown_roles types ptchown_t;

########################################
#
# Local policy
#

allow ptchown_t self:capability { chown fowner fsetid setuid };
allow ptchown_t self:process { getcap setcap };

files_read_etc_files(ptchown_t)

fs_rw_anon_inodefs_files(ptchown_t)

term_setattr_generic_ptys(ptchown_t)
term_getattr_all_ptys(ptchown_t)
term_setattr_all_ptys(ptchown_t)
term_use_generic_ptys(ptchown_t)
term_use_ptmx(ptchown_t)

miscfiles_read_localization(ptchown_t)