diff options
| author | Dominick Grift <dominick.grift@defensec.nl> | 2023-08-22 18:36:32 +0200 |
|---|---|---|
| committer | Dominick Grift <dominick.grift@defensec.nl> | 2023-08-22 18:36:32 +0200 |
| commit | f994b13c226275f8857fb3dd735799c8648bcdd2 (patch) | |
| tree | 77d170c455bd1d4115db418db4a569260e69486c /src/dev/termdev/serialtermdev.cil | |
| parent | 087abd9a356861e65e5489b1307dc1564c9e6f2b (diff) | |
| download | selinux-policy-f994b13c226275f8857fb3dd735799c8648bcdd2.tar.gz | |
termdev: use modern in after for appending macros
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Diffstat (limited to 'src/dev/termdev/serialtermdev.cil')
| -rw-r--r-- | src/dev/termdev/serialtermdev.cil | 33 |
1 files changed, 15 insertions, 18 deletions
diff --git a/src/dev/termdev/serialtermdev.cil b/src/dev/termdev/serialtermdev.cil index 5907658..0f04101 100644 --- a/src/dev/termdev/serialtermdev.cil +++ b/src/dev/termdev/serialtermdev.cil @@ -3,27 +3,9 @@ (block serialtermdev - (macro appendinherited_all_chr_files ((type ARG1)) - (allow ARG1 typeattr appendinherited_chr_file) - (allowx ARG1 typeattr IOCTLCONSOLE) - (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI) - (allowx ARG1 typeattr IOCTLVT)) - - (macro readwriteinherited_all_chr_files ((type ARG1)) - (allow ARG1 typeattr readwriteinherited_chr_file) - (allowx ARG1 typeattr IOCTLCONSOLE) - (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI) - (allowx ARG1 typeattr IOCTLVT)) - (macro type ((type ARG1)) (typeattributeset typeattr ARG1)) - (macro writeinherited_all_chr_files ((type ARG1)) - (allow ARG1 typeattr writeinherited_chr_file) - (allowx ARG1 typeattr IOCTLCONSOLE) - (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI) - (allowx ARG1 typeattr IOCTLVT)) - (typeattribute typeattr) (blockinherit .file.all_macro_template_chr_files) @@ -116,3 +98,18 @@ (typeattribute typeattr) (allow typeattr serialtermdev.typeattr (chr_file (not (execmod mounton)))))) + +(in after serialtermdev.appendinherited_all_chr_files + (allowx ARG1 typeattr IOCTLCONSOLE) + (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI) + (allowx ARG1 typeattr IOCTLVT)) + +(in after serialtermdev.readwriteinherited_all_chr_files + (allowx ARG1 typeattr IOCTLCONSOLE) + (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI) + (allowx ARG1 typeattr IOCTLVT)) + +(in after serialtermdev.writeinherited_all_chr_files + (allowx ARG1 typeattr IOCTLCONSOLE) + (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI) + (allowx ARG1 typeattr IOCTLVT)) |