gcc_config_additional.te 463 B

123456789101112131415161718192021
  1. policy_module(gcc_config_additional, 0.0.1)
  2. require {
  3. type bin_t;
  4. type lib_t;
  5. type gcc_config_t;
  6. type portage_devpts_t;
  7. }
  8. allow gcc_config_t self:capability dac_read_search;
  9. allow gcc_config_t self:process getsched;
  10. manage_lnk_files_pattern(gcc_config_t, bin_t, bin_t)
  11. manage_lnk_files_pattern(gcc_config_t, lib_t, lib_t)
  12. allow gcc_config_t portage_devpts_t:chr_file { append read };
  13. dev_read_urand(gcc_config_t)
  14. files_read_var_files(gcc_config_t)