29 lines
828 B
Text
29 lines
828 B
Text
# Policy for usf daemons
|
|
type usf, domain, domain_deprecated;
|
|
type usf_exec, exec_type, file_type;
|
|
|
|
# Started by init
|
|
init_daemon_domain(usf)
|
|
net_domain(usf)
|
|
|
|
# Ultrasound device
|
|
allow usf usf_device:chr_file rw_file_perms;
|
|
|
|
# Audio
|
|
allow usf audio_data_file:sock_file write;
|
|
allow usf mediaserver:unix_stream_socket connectto;
|
|
allow usf audio_data_file:dir r_dir_perms;
|
|
allow usf audio_device:chr_file rw_file_perms;
|
|
allow usf proc_audiod:file r_file_perms;
|
|
allow usf audio_device:dir r_dir_perms;
|
|
|
|
# Data files and persist storage
|
|
allow usf usf_data_file:dir rw_dir_perms;
|
|
allow usf usf_data_file:{ file sock_file fifo_file } create_file_perms;
|
|
allow usf usf_data_file:lnk_file r_file_perms;
|
|
r_dir_file(usf, persist_file)
|
|
r_dir_file(usf, persist_usf_file)
|
|
|
|
# Properties
|
|
set_prop(usf, ctl_default_prop)
|
|
set_prop(usf, usf_prop)
|