policy/modules/apps/cpufreqselector.te

   1 policy_module(cpufreqselector, 1.2.3)
   2
   3 ########################################
   4 #
   5 # Declarations
   6 #
   7
   8 type cpufreqselector_t;
   9 type cpufreqselector_exec_t;
  10 application_domain(cpufreqselector_t, cpufreqselector_exec_t)
  11
  12 ########################################
  13 #
  14 # cpufreq-selector local policy
  15 #
  16
  17 allow cpufreqselector_t self:capability { sys_nice sys_ptrace };
  18 allow cpufreqselector_t self:process getsched;
  19 allow cpufreqselector_t self:fifo_file rw_fifo_file_perms;
  20
  21 kernel_read_system_state(cpufreqselector_t)
  22
  23 files_read_etc_files(cpufreqselector_t)
  24 files_read_usr_files(cpufreqselector_t)
  25
  26 corecmd_search_bin(cpufreqselector_t)
  27
  28 dev_rw_sysfs(cpufreqselector_t)
  29
  30 miscfiles_read_localization(cpufreqselector_t)
  31
  32 userdom_read_all_users_state(cpufreqselector_t)
  33 userdom_dontaudit_search_user_home_dirs(cpufreqselector_t)
  34
  35 optional_policy(`
  36         dbus_system_domain(cpufreqselector_t, cpufreqselector_exec_t)
  37
  38         optional_policy(`
  39                 consolekit_dbus_chat(cpufreqselector_t)
  40         ')
  41
  42         optional_policy(`
  43                 policykit_dbus_chat(cpufreqselector_t)
  44         ')
  45 ')
  46
  47 optional_policy(`
  48         nscd_dontaudit_search_pid(cpufreqselector_t)
  49 ')
  50
  51 optional_policy(`
  52         policykit_domtrans_auth(cpufreqselector_t)
  53         policykit_read_lib(cpufreqselector_t)
  54         policykit_read_reload(cpufreqselector_t)
  55 ')