| Biswajit Paul | 6786a92 | 2017-03-16 11:53:53 -0700 | [diff] [blame] | 1 | type mpdecision, domain, mlstrustedsubject; |
| Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 2 | type mpdecision_exec, exec_type, vendor_file_type, file_type; |
| Archana Sathyakumar | 1e3449f | 2014-08-29 12:33:39 -0700 | [diff] [blame] | 3 | |
| 4 | init_daemon_domain(mpdecision) |
| 5 | |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 6 | allow mpdecision { |
| 7 | sysfs_mpdecision |
| 8 | sysfs_devices_system_cpu |
| 9 | sysfs_cpu_online |
| 10 | }:file rw_file_perms; |
| 11 | |
| Archana Sathyakumar | 1e3449f | 2014-08-29 12:33:39 -0700 | [diff] [blame] | 12 | #Allow mpdecision set cpu affinity |
| 13 | allow mpdecision kernel:process setsched; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 14 | |
| Archana Sathyakumar | 1e3449f | 2014-08-29 12:33:39 -0700 | [diff] [blame] | 15 | #Allow writes to /dev/cpu_dma_latency |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 16 | allow mpdecision self: { |
| 17 | netlink_kobject_uevent_socket |
| 18 | socket |
| Biswajit Paul | 2d35d98 | 2017-02-01 17:40:10 -0800 | [diff] [blame] | 19 | } create_socket_perms_no_ioctl; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 20 | |
| Archana Sathyakumar | 1e3449f | 2014-08-29 12:33:39 -0700 | [diff] [blame] | 21 | allow mpdecision device_latency:chr_file w_file_perms; |
| Avijit Kanti Das | ddeea14 | 2014-10-16 12:57:19 -0700 | [diff] [blame] | 22 | |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 23 | r_dir_file(mpdecision, sysfs_rqstats) |
| 24 | allow mpdecision sysfs_rqstats:file w_file_perms; |
| 25 | r_dir_file(mpdecision, sysfs_thermal) |
| Raghavendra Prasad Nagaraj | 2ed6380 | 2015-08-14 17:47:05 +0530 | [diff] [blame] | 26 | allow mpdecision sysfs_thermal:file write; |
| Vince Leung | 06bd7d8 | 2014-10-15 15:15:57 -0700 | [diff] [blame] | 27 | |
| 28 | #policies for mpctl |
| 29 | #mpctl socket |
| Samir Mehta | 7ca611a | 2014-12-01 14:51:34 +0530 | [diff] [blame] | 30 | allow mpdecision self:capability { net_admin chown dac_override fsetid sys_nice }; |
| Vince Leung | 06bd7d8 | 2014-10-15 15:15:57 -0700 | [diff] [blame] | 31 | allow mpdecision mpctl_socket:dir rw_dir_perms; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 32 | allow mpdecision mpctl_socket:sock_file create_file_perms; |
| Vince Leung | 06bd7d8 | 2014-10-15 15:15:57 -0700 | [diff] [blame] | 33 | |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 34 | allow mpdecision sysfs:file w_file_perms; |
| Vince Leung | 06bd7d8 | 2014-10-15 15:15:57 -0700 | [diff] [blame] | 35 | |
| 36 | #default_values file |
| 37 | allow mpdecision mpctl_data_file:dir rw_dir_perms; |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 38 | allow mpdecision mpctl_data_file:file create_file_perms; |
| Vince Leung | 06bd7d8 | 2014-10-15 15:15:57 -0700 | [diff] [blame] | 39 | |
| 40 | #allow poll of system_server status |
| Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 41 | r_dir_file(mpdecision, system_server) |
| Raghavendra Prasad Nagaraj | 2ed6380 | 2015-08-14 17:47:05 +0530 | [diff] [blame] | 42 | |
| 43 | #mpdecision set properties |
| sahil madeka | a3608c9 | 2017-05-12 15:41:40 -0700 | [diff] [blame] | 44 | set_prop(mpdecision, mpdecision_prop) |