blob: 8823dec2b4fe2e02594d8a3532db565914fbbea0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
# Policy for usf daemons
type usf, domain, domain_deprecated;
type usf_exec, exec_type, file_type;
# Started by init
init_daemon_domain(usf)
net_domain(usf)
# Ultrasound device
allow usf usf_device:chr_file rw_file_perms;
# Audio
allow usf audio_data_file:sock_file write;
allow usf mediaserver:unix_stream_socket connectto;
allow usf audio_data_file:dir r_dir_perms;
allow usf audio_device:chr_file rw_file_perms;
allow usf proc_audiod:file r_file_perms;
allow usf audio_device:dir r_dir_perms;
# Data files and persist storage
allow usf usf_data_file:dir rw_dir_perms;
allow usf usf_data_file:{ file sock_file fifo_file } create_file_perms;
allow usf usf_data_file:lnk_file r_file_perms;
r_dir_file(usf, persist_file)
r_dir_file(usf, persist_usf_file)
# Properties
allow usf { ctl_default_prop usf_prop }:property_service set;
# Sockets
unix_socket_connect(usf, property, init);
|
