common/ssr_setup.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

# Policy for ssr_setup
# ssr_setup - ssr_setup domain
type ssr_setup, domain;
type ssr_setup_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(ssr_setup);

# Required to discover esoc's
r_dir_file(ssr_setup, sysfs_esoc)

# Required to enable/disable ssr
r_dir_file(ssr_setup, sysfs_ssr)
allow ssr_setup sysfs_ssr:lnk_file w_file_perms;
allow ssr_setup sysfs_ssr_toggle:file rw_file_perms;

# Keeping this here till sysfs labeling is resolved
allow ssr_setup sysfs:file w_file_perms;
allow ssr_setup sysfs_data:file r_file_perms;