summaryrefslogtreecommitdiff
path: root/src/dev/termdev.cil
diff options
context:
space:
mode:
Diffstat (limited to 'src/dev/termdev.cil')
-rw-r--r--src/dev/termdev.cil33
1 files changed, 15 insertions, 18 deletions
diff --git a/src/dev/termdev.cil b/src/dev/termdev.cil
index efd5e7a..956cc18 100644
--- a/src/dev/termdev.cil
+++ b/src/dev/termdev.cil
@@ -3,27 +3,9 @@
(block termdev
- (macro appendinherited_all_chr_files ((type ARG1))
- (allow ARG1 typeattr appendinherited_chr_file)
- (allowx ARG1 typeattr IOCTLCONSOLE)
- (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI)
- (allowx ARG1 typeattr IOCTLVT))
-
- (macro readwriteinherited_all_chr_files ((type ARG1))
- (allow ARG1 typeattr readwriteinherited_chr_file)
- (allowx ARG1 typeattr IOCTLCONSOLE)
- (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI)
- (allowx ARG1 typeattr IOCTLVT))
-
(macro type ((type ARG1))
(typeattributeset typeattr ARG1))
- (macro writeinherited_all_chr_files ((type ARG1))
- (allow ARG1 typeattr writeinherited_chr_file)
- (allowx ARG1 typeattr IOCTLCONSOLE)
- (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI)
- (allowx ARG1 typeattr IOCTLVT))
-
(typeattribute typeattr)
(blockinherit .file.all_macro_template_chr_files)
@@ -38,3 +20,18 @@
(typeattribute typeattr)
(allow typeattr termdev.typeattr (chr_file (not (audit_access execmod))))))
+
+(in after termdev.appendinherited_all_chr_files
+ (allowx ARG1 typeattr IOCTLCONSOLE)
+ (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI)
+ (allowx ARG1 typeattr IOCTLVT))
+
+(in after termdev.readwriteinherited_all_chr_files
+ (allowx ARG1 typeattr IOCTLCONSOLE)
+ (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI)
+ (allowx ARG1 typeattr IOCTLVT))
+
+(in after termdev.writeinherited_all_chr_files
+ (allowx ARG1 typeattr IOCTLCONSOLE)
+ (allowx ARG1 typeattr IOCTLTTY_NOT_TIOCSTI)
+ (allowx ARG1 typeattr IOCTLVT))