| Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame^] | 1 | # ueventd seclabel is specified in init.rc since |
| 2 | # it lives in the rootfs and has no unique file type. |
| 3 | type ueventd, domain; |
| 4 | tmpfs_domain(ueventd) |
| 5 | allow ueventd rootfs:file r_file_perms; |
| 6 | allow ueventd rootfs:file entrypoint; |
| 7 | allow ueventd init:process sigchld; |
| 8 | allow ueventd self:capability { chown mknod net_admin setgid fsetid }; |
| 9 | allow ueventd kernel:fd use; |
| 10 | allow ueventd device:file create_file_perms; |
| 11 | allow ueventd device:chr_file rw_file_perms; |
| 12 | allow ueventd sysfs:file rw_file_perms; |
| 13 | allow ueventd sysfs:file setattr; |
| 14 | allow ueventd tmpfs:chr_file rw_file_perms; |
| 15 | allow ueventd dev_type:dir create_dir_perms; |
| 16 | allow ueventd dev_type:lnk_file { create unlink }; |
| 17 | allow ueventd dev_type:chr_file { create setattr unlink }; |
| 18 | allow ueventd dev_type:blk_file { create setattr unlink }; |
| 19 | allow ueventd self:netlink_kobject_uevent_socket *; |