summaryrefslogtreecommitdiffstats
path: root/recipes-security/refpolicy/refpolicy-git/0022-policy-module-terminals-add-rules-for-bsdpty_device_.patch
diff options
context:
space:
mode:
Diffstat (limited to 'recipes-security/refpolicy/refpolicy-git/0022-policy-module-terminals-add-rules-for-bsdpty_device_.patch')
-rw-r--r--recipes-security/refpolicy/refpolicy-git/0022-policy-module-terminals-add-rules-for-bsdpty_device_.patch123
1 files changed, 0 insertions, 123 deletions
diff --git a/recipes-security/refpolicy/refpolicy-git/0022-policy-module-terminals-add-rules-for-bsdpty_device_.patch b/recipes-security/refpolicy/refpolicy-git/0022-policy-module-terminals-add-rules-for-bsdpty_device_.patch
deleted file mode 100644
index 68235b1..0000000
--- a/recipes-security/refpolicy/refpolicy-git/0022-policy-module-terminals-add-rules-for-bsdpty_device_.patch
+++ /dev/null
@@ -1,123 +0,0 @@
1From 938ae00d2358d6ebad8173fce274ebb70d95cf72 Mon Sep 17 00:00:00 2001
2From: Xin Ouyang <Xin.Ouyang@windriver.com>
3Date: Thu, 22 Aug 2013 13:37:23 +0800
4Subject: [PATCH 22/34] policy/module/terminals: add rules for bsdpty_device_t
5 to complete pty devices.
6
7Upstream-Status: Pending
8
9Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
10Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
11---
12 policy/modules/kernel/terminal.if | 16 ++++++++++++++++
13 1 file changed, 16 insertions(+)
14
15diff --git a/policy/modules/kernel/terminal.if b/policy/modules/kernel/terminal.if
16index 61308843..a84787e6 100644
17--- a/policy/modules/kernel/terminal.if
18+++ b/policy/modules/kernel/terminal.if
19@@ -623,9 +623,11 @@ interface(`term_getattr_generic_ptys',`
20 interface(`term_dontaudit_getattr_generic_ptys',`
21 gen_require(`
22 type devpts_t;
23+ type bsdpty_device_t;
24 ')
25
26 dontaudit $1 devpts_t:chr_file getattr;
27+ dontaudit $1 bsdpty_device_t:chr_file getattr;
28 ')
29 ########################################
30 ## <summary>
31@@ -641,11 +643,13 @@ interface(`term_dontaudit_getattr_generic_ptys',`
32 interface(`term_ioctl_generic_ptys',`
33 gen_require(`
34 type devpts_t;
35+ type bsdpty_device_t;
36 ')
37
38 dev_list_all_dev_nodes($1)
39 allow $1 devpts_t:dir search;
40 allow $1 devpts_t:chr_file ioctl;
41+ allow $1 bsdpty_device_t:chr_file ioctl;
42 ')
43
44 ########################################
45@@ -663,9 +667,11 @@ interface(`term_ioctl_generic_ptys',`
46 interface(`term_setattr_generic_ptys',`
47 gen_require(`
48 type devpts_t;
49+ type bsdpty_device_t;
50 ')
51
52 allow $1 devpts_t:chr_file setattr;
53+ allow $1 bsdpty_device_t:chr_file setattr;
54 ')
55
56 ########################################
57@@ -683,9 +689,11 @@ interface(`term_setattr_generic_ptys',`
58 interface(`term_dontaudit_setattr_generic_ptys',`
59 gen_require(`
60 type devpts_t;
61+ type bsdpty_device_t;
62 ')
63
64 dontaudit $1 devpts_t:chr_file setattr;
65+ dontaudit $1 bsdpty_device_t:chr_file setattr;
66 ')
67
68 ########################################
69@@ -703,11 +711,13 @@ interface(`term_dontaudit_setattr_generic_ptys',`
70 interface(`term_use_generic_ptys',`
71 gen_require(`
72 type devpts_t;
73+ type bsdpty_device_t;
74 ')
75
76 dev_list_all_dev_nodes($1)
77 allow $1 devpts_t:dir list_dir_perms;
78 allow $1 devpts_t:chr_file { rw_term_perms lock append };
79+ allow $1 bsdpty_device_t:chr_file { rw_term_perms lock append };
80 ')
81
82 ########################################
83@@ -725,9 +735,11 @@ interface(`term_use_generic_ptys',`
84 interface(`term_dontaudit_use_generic_ptys',`
85 gen_require(`
86 type devpts_t;
87+ type bsdpty_device_t;
88 ')
89
90 dontaudit $1 devpts_t:chr_file { getattr read write ioctl };
91+ dontaudit $1 bsdpty_device_t:chr_file { getattr read write ioctl };
92 ')
93
94 #######################################
95@@ -743,10 +755,12 @@ interface(`term_dontaudit_use_generic_ptys',`
96 interface(`term_setattr_controlling_term',`
97 gen_require(`
98 type devtty_t;
99+ type bsdpty_device_t;
100 ')
101
102 dev_list_all_dev_nodes($1)
103 allow $1 devtty_t:chr_file setattr;
104+ allow $1 bsdpty_device_t:chr_file setattr;
105 ')
106
107 ########################################
108@@ -763,10 +777,12 @@ interface(`term_setattr_controlling_term',`
109 interface(`term_use_controlling_term',`
110 gen_require(`
111 type devtty_t;
112+ type bsdpty_device_t;
113 ')
114
115 dev_list_all_dev_nodes($1)
116 allow $1 devtty_t:chr_file { rw_term_perms lock append };
117+ allow $1 bsdpty_device_t:chr_file { rw_term_perms lock append };
118 ')
119
120 #######################################
121--
1222.19.1
123