Skip to content
Open

games #1026

Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion policy/modules/apps/games.te
Original file line number Diff line number Diff line change
Expand Up @@ -89,18 +89,21 @@ optional_policy(`
# Client local policy
#

allow games_t self:process getsched;
allow games_t self:fifo_file rw_fifo_file_perms;
allow games_t self:sem create_sem_perms;
allow games_t self:tcp_socket { accept listen };

manage_dirs_pattern(games_t, games_data_t, games_data_t)
manage_files_pattern(games_t, games_data_t, games_data_t)
manage_lnk_files_pattern(games_t, games_data_t, games_data_t)

allow games_t games_devpts_t:chr_file { rw_chr_file_perms setattr_chr_file_perms };
term_create_pty(games_t, games_devpts_t)

manage_dirs_pattern(games_t, games_tmp_t, games_tmp_t)
manage_files_pattern(games_t, games_tmp_t, games_tmp_t)
mmap_manage_files_pattern(games_t, games_tmp_t, games_tmp_t)

files_tmp_filetrans(games_t, games_tmp_t, { file dir })

manage_files_pattern(games_t, games_tmpfs_t, games_tmpfs_t)
Expand Down Expand Up @@ -136,13 +139,16 @@ dev_rw_dri(games_t)
dev_write_sound(games_t)

files_list_var(games_t)
files_search_mnt(games_t)
files_search_var_lib(games_t)
files_dontaudit_search_var(games_t)
files_map_usr_files(games_t)
files_read_etc_files(games_t)
files_read_usr_files(games_t)
files_read_var_files(games_t)

fs_dontaudit_getattr_xattr_fs(games_t)
fs_search_nfs(games_t)

init_dontaudit_rw_utmp(games_t)

Expand All @@ -158,6 +164,7 @@ userdom_manage_user_tmp_dirs(games_t)
userdom_manage_user_tmp_files(games_t)
userdom_manage_user_tmp_symlinks(games_t)
userdom_manage_user_tmp_sockets(games_t)
userdom_use_inherited_user_terminals(games_t)
userdom_dontaudit_read_user_home_content_files(games_t)

tunable_policy(`allow_execmem',`
Expand All @@ -166,6 +173,7 @@ tunable_policy(`allow_execmem',`

optional_policy(`
alsa_read_config(games_t)
alsa_read_home_files(games_t)
')

optional_policy(`
Expand Down
Loading