| # Policy for ssr_setup | |
| # ssr_setup - ssr_setup domain | |
| type ssr_setup, domain; | |
| type ssr_setup_exec, exec_type, file_type; | |
| init_daemon_domain(ssr_setup); | |
| # Required to discover esoc's | |
| r_dir_file(ssr_setup, sysfs_esoc) | |
| # Required to enable/disable ssr | |
| r_dir_file(ssr_setup, sysfs_ssr) | |
| allow ssr_setup sysfs_ssr:lnk_file w_file_perms; | |
| allow ssr_setup sysfs_ssr_toggle:file rw_file_perms; | |
| # Keeping this here till sysfs labeling is resolved | |
| allow ssr_setup sysfs:file w_file_perms; |