[gentoo-commits] proj/hardened-refpolicy:master commit in: /

["Sven Vermeulen" <sven.vermeulen@siphos.be>]

commit:     e72fdddbcbada2737ac790ce5d375cc47927ea47
Author:     Dominick Grift <dominick.grift <AT> gmail <DOT> com>
AuthorDate: Thu Nov 29 12:41:57 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Mon Dec  3 09:32:38 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=e72fdddb

Initial jockey policy module

Ported from Fedora with changes

Jockey driver manager

Jockey backend probes the system for available
hardware

Signed-off-by: Dominick Grift <dominick.grift <AT> gmail.com>

---
 jockey.fc |    6 ++++++
 jockey.if |    1 +
 jockey.te |   59 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 66 insertions(+), 0 deletions(-)

diff --git a/jockey.fc b/jockey.fc
new file mode 100644
index 0000000..d57dad4
--- /dev/null
+++ b/jockey.fc
@@ -0,0 +1,6 @@
+/usr/share/jockey/jockey-backend	--	gen_context(system_u:object_r:jockey_exec_t,s0)
+
+/var/cache/jockey(/.*)?	gen_context(system_u:object_r:jockey_cache_t,s0)
+
+/var/log/jockey(/.*)?	gen_context(system_u:object_r:jockey_var_log_t,s0)
+/var/log/jockey\.log.*	--	gen_context(system_u:object_r:jockey_var_log_t,s0)

diff --git a/jockey.if b/jockey.if
new file mode 100644
index 0000000..2fb7a20
--- /dev/null
+++ b/jockey.if
@@ -0,0 +1 @@
+## <summary>Jockey driver manager.</summary>

diff --git a/jockey.te b/jockey.te
new file mode 100644
index 0000000..d59ec10
--- /dev/null
+++ b/jockey.te
@@ -0,0 +1,59 @@
+policy_module(jockey, 1.0.0)
+
+########################################
+#
+# Declarations
+#
+
+type jockey_t;
+type jockey_exec_t;
+init_daemon_domain(jockey_t, jockey_exec_t)
+
+type jockey_cache_t;
+files_type(jockey_cache_t)
+
+type jockey_var_log_t;
+logging_log_file(jockey_var_log_t)
+
+########################################
+#
+# Local policy
+#
+
+allow jockey_t self:fifo_file rw_fifo_file_perms;
+
+manage_dirs_pattern(jockey_t, jockey_cache_t, jockey_cache_t)
+manage_files_pattern(jockey_t, jockey_cache_t, jockey_cache_t)
+manage_lnk_files_pattern(jockey_t, jockey_cache_t, jockey_cache_t)
+files_var_filetrans(jockey_t, jockey_cache_t, { dir file })
+
+manage_dirs_pattern(jockey_t, jockey_var_log_t, jockey_var_log_t)
+append_files_pattern(jockey_t, jockey_var_log_t, jockey_var_log_t)
+create_files_pattern(jockey_t, jockey_var_log_t, jockey_var_log_t)
+setattr_files_pattern(jockey_t, jockey_var_log_t, jockey_var_log_t)
+logging_log_filetrans(jockey_t, jockey_var_log_t, { file dir })
+
+kernel_read_system_state(jockey_t)
+
+corecmd_exec_bin(jockey_t)
+corecmd_exec_shell(jockey_t)
+
+dev_read_rand(jockey_t)
+dev_read_sysfs(jockey_t)
+dev_read_urand(jockey_t)
+
+domain_use_interactive_fds(jockey_t)
+
+files_read_etc_files(jockey_t)
+files_read_usr_files(jockey_t)
+
+miscfiles_read_localization(jockey_t)
+
+optional_policy(`
+	dbus_system_domain(jockey_t, jockey_exec_t)
+')
+
+optional_policy(`
+	modutils_domtrans_insmod(jockey_t)
+	modutils_read_module_config(jockey_t)
+')