diff options
Diffstat (limited to 'policy/modules/contrib/mcelog.te')
| -rw-r--r-- | policy/modules/contrib/mcelog.te | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/policy/modules/contrib/mcelog.te b/policy/modules/contrib/mcelog.te new file mode 100644 index 000000000..567197794 --- /dev/null +++ b/policy/modules/contrib/mcelog.te @@ -0,0 +1,32 @@ +policy_module(mcelog, 1.1.0) + +######################################## +# +# Declarations +# + +type mcelog_t; +type mcelog_exec_t; +application_domain(mcelog_t, mcelog_exec_t) +cron_system_entry(mcelog_t, mcelog_exec_t) + +######################################## +# +# mcelog local policy +# + +allow mcelog_t self:capability sys_admin; + +kernel_read_system_state(mcelog_t) + +dev_read_raw_memory(mcelog_t) +dev_read_kmsg(mcelog_t) + +files_read_etc_files(mcelog_t) + +# for /dev/mem access +mls_file_read_all_levels(mcelog_t) + +logging_send_syslog_msg(mcelog_t) + +miscfiles_read_localization(mcelog_t) |