diff --git a/refpolicy/policy/modules/system/domain.if b/refpolicy/policy/modules/system/domain.if index f41a158..a3388c3 100644 --- a/refpolicy/policy/modules/system/domain.if +++ b/refpolicy/policy/modules/system/domain.if @@ -1,4 +1,6 @@ # Copyright (C) 2005 Tresys Technology, LLC +## +## Core policy for domains. ######################################## # @@ -132,6 +134,27 @@ class process signal; ') ######################################## +## +## +## Send a null signal to all domains. +## +## +## The type of the process performing this action. +## +## +## +# +define(`domain_signull_all_domains',` +requires_block_template(`$0'_depend) +allow $1 domain:process signull; +') + +define(`domain_signull_all_domains_depend',` +attribute domain; +class process signull; +') + +######################################## # # domain_kill_all_domains(domain) # @@ -201,3 +224,5 @@ define(`domain_read_all_entrypoint_programs_depend',` attribute entry_type; class file { getattr read }; ') + +##