Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 1 | ##################################### |
| 2 | # Common groupings of object classes. |
| 3 | # |
| 4 | define(`capability_class_set', `{ capability capability2 }') |
| 5 | |
| 6 | define(`dir_file_class_set', `{ dir file lnk_file sock_file fifo_file chr_file blk_file }') |
| 7 | define(`file_class_set', `{ file lnk_file sock_file fifo_file chr_file blk_file }') |
| 8 | define(`notdevfile_class_set', `{ file lnk_file sock_file fifo_file }') |
| 9 | define(`devfile_class_set', `{ chr_file blk_file }') |
| 10 | |
Stephen Smalley | 60e4f11 | 2012-06-28 14:28:24 -0400 | [diff] [blame^] | 11 | define(`socket_class_set', `{ socket tcp_socket udp_socket rawip_socket netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket netlink_kobject_uevent_socket tun_socket }') |
Stephen Smalley | 2dd4e51 | 2012-01-04 12:33:27 -0500 | [diff] [blame] | 12 | define(`dgram_socket_class_set', `{ udp_socket unix_dgram_socket }') |
| 13 | define(`stream_socket_class_set', `{ tcp_socket unix_stream_socket }') |
| 14 | define(`unpriv_socket_class_set', `{ tcp_socket udp_socket unix_stream_socket unix_dgram_socket }') |
| 15 | |
| 16 | define(`ipc_class_set', `{ sem msgq shm ipc }') |
| 17 | |
| 18 | ##################################### |
| 19 | # Common groupings of permissions. |
| 20 | # |
| 21 | define(`x_file_perms', `{ getattr execute execute_no_trans }') |
| 22 | define(`r_file_perms', `{ getattr open read ioctl lock }') |
| 23 | define(`w_file_perms', `{ open append write }') |
| 24 | define(`rx_file_perms', `{ r_file_perms x_file_perms }') |
| 25 | define(`ra_file_perms', `{ r_file_perms append }') |
| 26 | define(`rw_file_perms', `{ r_file_perms w_file_perms }') |
| 27 | define(`rwx_file_perms', `{ rw_file_perms x_file_perms }') |
| 28 | define(`link_file_perms', `{ getattr link unlink rename }') |
| 29 | define(`create_file_perms', `{ create setattr rw_file_perms link_file_perms }') |
| 30 | |
| 31 | define(`r_dir_perms', `{ open getattr read search ioctl }') |
| 32 | define(`w_dir_perms', `{ open search write add_name remove_name }') |
| 33 | define(`ra_dir_perms', `{ r_dir_perms add_name write }') |
| 34 | define(`rw_dir_perms', `{ r_dir_perms w_dir_perms }') |
| 35 | define(`create_dir_perms', `{ create reparent rmdir setattr rw_dir_perms link_file_perms }') |
| 36 | |
| 37 | define(`r_ipc_perms', `{ getattr read associate unix_read }') |
| 38 | define(`w_ipc_perms', `{ write unix_write }') |
| 39 | define(`rw_ipc_perms', `{ r_ipc_perms w_ipc_perms }') |
| 40 | define(`create_ipc_perms', `{ create setattr destroy rw_ipc_perms }') |