diff options
Diffstat (limited to 'policy/modules/apps/seunshare.te')
| -rw-r--r-- | policy/modules/apps/seunshare.te | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/policy/modules/apps/seunshare.te b/policy/modules/apps/seunshare.te new file mode 100644 index 00000000..dcec4bf1 --- /dev/null +++ b/policy/modules/apps/seunshare.te @@ -0,0 +1,35 @@ + +policy_module(seunshare, 1.0.0) + +######################################## +# +# Declarations +# + +type seunshare_t; +type seunshare_exec_t; +application_domain(seunshare_t, seunshare_exec_t) +role system_r types seunshare_t; + +######################################## +# +# seunshare local policy +# + +allow seunshare_t self:capability setpcap; +allow seunshare_t self:process { setexec signal getcap setcap }; + +allow seunshare_t self:fifo_file rw_file_perms; +allow seunshare_t self:unix_stream_socket create_stream_socket_perms; + +corecmd_exec_shell(seunshare_t) +corecmd_exec_bin(seunshare_t) + +files_read_etc_files(seunshare_t) +files_mounton_all_poly_members(seunshare_t) + +auth_use_nsswitch(seunshare_t) + +miscfiles_read_localization(seunshare_t) + +userdom_use_user_terminals(seunshare_t) |