policy/modules/apps/cpufreqselector.te

   1 policy_module(cpufreqselector, 1.2.3)
   2
   3 ########################################
   4 #
   5 # Declarations
   6 #
   7
   8 type cpufreqselector_t;
   9 type cpufreqselector_exec_t;
  10 application_domain(cpufreqselector_t, cpufreqselector_exec_t)
  11
  12 ########################################
  13 #
  14 # cpufreq-selector local policy
  15 #
  16
  17 allow cpufreqselector_t self:capability { sys_nice sys_ptrace };
  18 allow cpufreqselector_t self:process getsched;
  19 allow cpufreqselector_t self:fifo_file rw_fifo_file_perms;
  20 allow cpufreqselector_t self:process getsched;
  21
  22 kernel_read_system_state(cpufreqselector_t)
  23
  24 files_read_etc_files(cpufreqselector_t)
  25 files_read_usr_files(cpufreqselector_t)
  26
  27 corecmd_search_bin(cpufreqselector_t)
  28
  29 dev_rw_sysfs(cpufreqselector_t)
  30
  31 kernel_read_system_state(cpufreqselector_t)
  32
  33 miscfiles_read_localization(cpufreqselector_t)
  34
  35 userdom_read_all_users_state(cpufreqselector_t)
  36 userdom_dontaudit_search_admin_dir(cpufreqselector_t)
  37
  38 optional_policy(`
  39         dbus_system_domain(cpufreqselector_t, cpufreqselector_exec_t)
  40
  41         optional_policy(`
  42                 consolekit_dbus_chat(cpufreqselector_t)
  43         ')
  44
  45         optional_policy(`
  46                 policykit_dbus_chat(cpufreqselector_t)
  47         ')
  48 ')
  49
  50 optional_policy(`
  51         nscd_dontaudit_search_pid(cpufreqselector_t)
  52 ')
  53
  54 optional_policy(`
  55         policykit_domtrans_auth(cpufreqselector_t)
  56         policykit_read_lib(cpufreqselector_t)
  57         policykit_read_reload(cpufreqselector_t)
  58 ')
  59
  60 optional_policy(`
  61         xserver_dbus_chat_xdm(cpufreqselector_t)
  62 ')