diff --git a/policy/modules/kernel/terminal.if b/policy/modules/kernel/terminal.if index 38b493a..f89eaba 100644 --- a/policy/modules/kernel/terminal.if +++ b/policy/modules/kernel/terminal.if @@ -155,6 +155,29 @@ interface(`term_create_pty',` ######################################## ## +## Write the console, all +## ttys and all ptys. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`term_write_all_terms',` + gen_require(` + attribute ttynode, ptynode; + type console_device_t, devpts_t, tty_device_t; + ') + + dev_list_all_dev_nodes($1) + allow $1 devpts_t:dir list_dir_perms; + allow $1 { console_device_t tty_device_t ttynode ptynode }:chr_file write_chr_file_perms; +') + +######################################## +## ## Read and write the console, all ## ttys and all ptys. ##