[selinux-policy: 197/3172] add signull all domains
Daniel J Walsh
dwalsh at fedoraproject.org
Thu Oct 7 19:22:00 UTC 2010
commit 1c9f9a50df1ffb3e200972c8c4d2e7e4363f302b
Author: Chris PeBenito <cpebenito at tresys.com>
Date: Mon May 23 15:49:03 2005 +0000
add signull all domains
refpolicy/policy/modules/system/domain.if | 25 +++++++++++++++++++++++++
1 files changed, 25 insertions(+), 0 deletions(-)
---
diff --git a/refpolicy/policy/modules/system/domain.if b/refpolicy/policy/modules/system/domain.if
index f41a158..a3388c3 100644
--- a/refpolicy/policy/modules/system/domain.if
+++ b/refpolicy/policy/modules/system/domain.if
@@ -1,4 +1,6 @@
# Copyright (C) 2005 Tresys Technology, LLC
+## <module name="domain" layer="system">
+## <summary>Core policy for domains.</summary>
########################################
#
@@ -132,6 +134,27 @@ class process signal;
')
########################################
+## <interface name="domain_signull_all_domains">
+## <description>
+## Send a null signal to all domains.
+## </description>
+## <parameter name="domain">
+## The type of the process performing this action.
+## </parameter>
+## <infoflow type="write" weight="1"/>
+## </interface>
+#
+define(`domain_signull_all_domains',`
+requires_block_template(`$0'_depend)
+allow $1 domain:process signull;
+')
+
+define(`domain_signull_all_domains_depend',`
+attribute domain;
+class process signull;
+')
+
+########################################
#
# domain_kill_all_domains(domain)
#
@@ -201,3 +224,5 @@ define(`domain_read_all_entrypoint_programs_depend',`
attribute entry_type;
class file { getattr read };
')
+
+## </module>
More information about the scm-commits
mailing list