wpa_supplicant module TE rules

wpa.te (text/plain), 941 bytes, created by Michael Edenfield on 2008-03-23 03:19:12 UTC

policy_module(wpa, 1.0.0)

########################################
#
# Declarations
#
type wpa_t;
type wpa_exec_t;
init_daemon_domain(wpa_t, wpa_exec_t)

type wpa_tmp_t;
files_tmp_file(wpa_tmp_t)

type wpa_var_run_t;
files_pid_file(wpa_var_run_t)

########################################
#
# Local Policy
#
allow wpa_t self:capability net_admin;
allow wpa_t self:unix_dgram_socket create_socket_perms;
allow wpa_t self:netlink_route_socket rw_netlink_socket_perms;
allow wpa_t self:udp_socket create_socket_perms;
allow wpa_t self:packet_socket create_socket_perms;

can_exec(wpa_t, wpa_exec_t)

manage_dirs_pattern(wpa_t, wpa_tmp_t, wpa_tmp_t)
manage_files_pattern(wpa_t, wpa_tmp_t, wpa_tmp_t)
files_tmp_filetrans(wpa_t, wpa_tmp_t, { file dir })

manage_files_pattern(wpa_t, wpa_var_run_t, wpa_var_run_t)
files_pid_filetrans(wpa_t, wpa_var_run_t, file)

init_domtrans_script(wpa_t)

dgram_send_pattern(wpa_t, wpa_tmp_t, wpa_tmp_t, wpa_t)