| # ============================================== |
| # Policy File of /vendor/bin/kisd Executable File |
| |
| # ============================================== |
| # Type Declaration |
| # ============================================== |
| |
| type kisd, domain; |
| type kisd_exec, exec_type, file_type, vendor_file_type; |
| typeattribute kisd mlstrustedsubject; |
| |
| # ============================================== |
| # Common SEPolicy Rule |
| # ============================================== |
| |
| init_daemon_domain(kisd) |
| |
| allow kisd tee_device:chr_file rw_file_perms; |
| allow kisd provision_file:dir rw_dir_perms; |
| allow kisd provision_file:file create_file_perms; |
| allow kisd kb_block_device:blk_file rw_file_perms; |
| allow kisd kb_block_device:chr_file rw_file_perms; |
| allow kisd dkb_block_device:blk_file rw_file_perms; |
| allow kisd dkb_block_device:chr_file rw_file_perms; |
| allow kisd key_install_data_file:dir w_dir_perms; |
| allow kisd key_install_data_file:file create_file_perms; |
| allow kisd key_install_data_file:dir search; |
| allow kisd mtd_device:chr_file rw_file_perms; |
| allow kisd mtd_device:blk_file rw_file_perms; |
| allow kisd mtd_device:dir search; |
| allow kisd block_device:dir search; |