diff options
| -rw-r--r-- | policy/modules/services/bluetooth.if | 22 | ||||
| -rw-r--r-- | policy/modules/services/bluetooth.te | 3 | ||||
| -rw-r--r-- | policy/modules/services/dbus.te | 1 |
3 files changed, 26 insertions, 0 deletions
diff --git a/policy/modules/services/bluetooth.if b/policy/modules/services/bluetooth.if index 0f45a8cc..bc3a72c1 100644 --- a/policy/modules/services/bluetooth.if +++ b/policy/modules/services/bluetooth.if @@ -188,6 +188,28 @@ interface(`bluetooth_dontaudit_read_helper_state',` dontaudit $1 bluetooth_helper_t:file read_file_perms; ') +##################################### +## <summary> +## Connect to bluetooth over a unix domain +## stream socket. The socket can be used +## for read and write. This is required for +# bluetooth helper context. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`bluetooth_use_inherited_helper_stream_sockets',` + gen_require(` + type bluetooth_helper_t; + ') + + allow $1 bluetooth_helper_t:unix_stream_socket rw_socket_perms; + allow $1 bluetooth_helper_t:fd use; +') + ######################################## ## <summary> ## All of the rules required to diff --git a/policy/modules/services/bluetooth.te b/policy/modules/services/bluetooth.te index 10d099d3..baf1016f 100644 --- a/policy/modules/services/bluetooth.te +++ b/policy/modules/services/bluetooth.te @@ -77,6 +77,9 @@ filetrans_pattern(bluetooth_t, bluetooth_conf_t, bluetooth_conf_rw_t, { dir file allow bluetooth_t bluetooth_lock_t:file manage_file_perms; files_lock_filetrans(bluetooth_t, bluetooth_lock_t, file) +bluetooth_use_inherited_helper_stream_sockets(bluetooth_t) + + manage_dirs_pattern(bluetooth_t, bluetooth_tmp_t, bluetooth_tmp_t) manage_files_pattern(bluetooth_t, bluetooth_tmp_t, bluetooth_tmp_t) files_tmp_filetrans(bluetooth_t, bluetooth_tmp_t, { dir file }) diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te index 58ac501d..fcb45ccd 100644 --- a/policy/modules/services/dbus.te +++ b/policy/modules/services/dbus.te @@ -272,6 +272,7 @@ optional_policy(` optional_policy(` bluetooth_use(system_dbusd_t) + bluetooth_use_inherited_helper_stream_sockets(system_dbusd_t) ') optional_policy(` |