| repo sync | 591967c | 2013-05-03 13:09:46 -0700 | [diff] [blame] | 1 | type kickstart, domain; |
| repo sync | 3c31883 | 2013-05-14 21:40:49 -0700 | [diff] [blame] | 2 | permissive kickstart; |
| repo sync | 591967c | 2013-05-03 13:09:46 -0700 | [diff] [blame] | 3 | type kickstart_exec, file_type, exec_type; |
| 4 | domain_auto_trans(init, kickstart_exec, kickstart) |
| 5 | |
| 6 | # XXX Everything bad happens here. |
| 7 | allow kickstart kickstart_exec:file rx_file_perms; |
| 8 | allow kickstart sdcard_external:file r_file_perms; |
| Alex Klyubin | c27b7bb | 2013-05-13 13:43:13 -0700 | [diff] [blame] | 9 | allow kickstart sdcard_external:dir search; |
| repo sync | 591967c | 2013-05-03 13:09:46 -0700 | [diff] [blame] | 10 | allow kickstart shell_exec:file rx_file_perms; |
| 11 | allow kickstart system_file:file x_file_perms; |
| 12 | allow kickstart system_data_file:file { create_file_perms rwx_file_perms }; |
| 13 | allow kickstart system_data_file:dir { write add_name }; |
| 14 | |
| 15 | allow kickstart block_device:blk_file rw_file_perms; |
| 16 | allow kickstart kickstart_device:chr_file rw_file_perms; |
| 17 | allow kickstart block_device:dir rw_dir_perms; |
| 18 | |
| 19 | allow kickstart radio_device:chr_file rw_file_perms; |
| 20 | allow kickstart sysfs:file append; |