4 ########################################
11 init_daemon_domain(gpm_t,gpm_exec_t)
14 files_type(gpm_conf_t)
17 files_tmp_file(gpm_tmp_t)
20 files_pid_file(gpm_var_run_t)
25 ########################################
30 allow gpm_t self:capability { setuid dac_override sys_admin sys_tty_config };
32 allow gpm_t gpm_conf_t:dir r_dir_perms;
33 allow gpm_t gpm_conf_t:file r_file_perms;
34 allow gpm_t gpm_conf_t:lnk_file { getattr read };
36 allow gpm_t gpm_tmp_t:dir create_dir_perms;
37 allow gpm_t gpm_tmp_t:file create_file_perms;
38 files_create_tmp_files(gpm_t, gpm_tmp_t, { file dir })
40 allow gpm_t gpm_var_run_t:file create_file_perms;
41 files_create_pid(gpm_t,gpm_var_run_t)
43 allow gpm_t gpmctl_t:sock_file create_file_perms;
44 allow gpm_t gpmctl_t:fifo_file create_file_perms;
45 dev_create_dev_node(gpm_t,gpmctl_t,{ sock_file fifo_file })
47 # cjp: this has no effect
48 allow gpm_t gpmctl_t:unix_stream_socket name_bind;
50 kernel_read_kernel_sysctl(gpm_t)
51 kernel_list_proc(gpm_t)
52 kernel_read_proc_symlinks(gpm_t)
59 fs_getattr_all_fs(gpm_t)
60 fs_search_auto_mountpoints(gpm_t)
62 term_use_unallocated_tty(gpm_t)
63 term_dontaudit_use_console(gpm_t)
65 domain_use_wide_inherit_fd(gpm_t)
68 init_use_script_pty(gpm_t)
71 libs_use_shared_libs(gpm_t)
73 logging_send_syslog_msg(gpm_t)
75 miscfiles_read_localization(gpm_t)
77 userdom_dontaudit_use_unpriv_user_fd(gpm_t)
78 userdom_dontaudit_search_sysadm_home_dir(gpm_t)
80 ifdef(`targeted_policy', `
81 term_dontaudit_use_unallocated_tty(gpm_t)
82 term_dontaudit_use_generic_pty(gpm_t)
83 files_dontaudit_read_root_file(gpm_t)
86 optional_policy(`selinuxutil.te',`
87 seutil_sigchld_newrole(gpm_t)
90 optional_policy(`udev.te', `
97 allow gpm_t { event_device_t mouse_device_t }:chr_file rw_file_perms;
98 optional_policy(`rhgb.te',`