2012-01-04 18:33:27 +01:00
|
|
|
# debugger interface
|
|
|
|
|
type debuggerd, domain;
|
|
|
|
|
type debuggerd_exec, exec_type, file_type;
|
|
|
|
|
|
|
|
|
|
init_daemon_domain(debuggerd)
|
|
|
|
|
typeattribute debuggerd mlstrustedsubject;
|
2012-07-31 15:15:46 +02:00
|
|
|
allow debuggerd self:capability { dac_override sys_ptrace chown kill fowner };
|
2012-08-10 12:25:52 +02:00
|
|
|
allow debuggerd self:capability2 { syslog };
|
2012-01-04 18:33:27 +01:00
|
|
|
allow debuggerd domain:dir r_dir_perms;
|
|
|
|
|
allow debuggerd domain:file r_file_perms;
|
|
|
|
|
allow debuggerd domain:process ptrace;
|
2012-07-31 15:15:46 +02:00
|
|
|
allow debuggerd rootfs:file r_file_perms;
|
|
|
|
|
allow debuggerd system_data_file:dir create_dir_perms;
|
|
|
|
|
allow debuggerd system_data_file:dir relabelfrom;
|
|
|
|
|
allow debuggerd tombstone_data_file:dir relabelto;
|
2012-01-04 18:33:27 +01:00
|
|
|
allow debuggerd tombstone_data_file:dir create_dir_perms;
|
|
|
|
|
allow debuggerd tombstone_data_file:file create_file_perms;
|
|
|
|
|
allow debuggerd domain:process { sigstop signal };
|
|
|
|
|
allow debuggerd exec_type:file r_file_perms;
|
2012-03-07 20:59:01 +01:00
|
|
|
allow debuggerd log_device:chr_file r_file_perms;
|
