diff options
Diffstat (limited to 'policy/modules/services/hddtemp.te')
| -rw-r--r-- | policy/modules/services/hddtemp.te | 38 |
1 files changed, 38 insertions, 0 deletions
diff --git a/policy/modules/services/hddtemp.te b/policy/modules/services/hddtemp.te new file mode 100644 index 00000000..e883ca38 --- /dev/null +++ b/policy/modules/services/hddtemp.te @@ -0,0 +1,38 @@ + +policy_module(hddtemp, 1.0.0) + +######################################## +# +# Declarations +# + +type hddtemp_t; +type hddtemp_exec_t; +init_daemon_domain(hddtemp_t, hddtemp_exec_t) + +type hddtemp_initrc_exec_t; +init_script_file(hddtemp_initrc_exec_t) + +######################################## +# +# hddtemp local policy +# + +allow hddtemp_t self:capability sys_rawio; +dontaudit hddtemp_t self:capability sys_admin; +allow hddtemp_t self:netlink_route_socket r_netlink_socket_perms; +allow hddtemp_t self:tcp_socket create_stream_socket_perms; +allow hddtemp_t self:udp_socket create_socket_perms; + +corenet_tcp_bind_all_nodes(hddtemp_t) +corenet_tcp_bind_hddtemp_port(hddtemp_t) + +# read hddtemp db file +files_read_usr_files(hddtemp_t) + +storage_raw_read_fixed_disk(hddtemp_t) + +logging_send_syslog_msg(hddtemp_t) + +miscfiles_read_localization(hddtemp_t) + |