e6a7713d07
* added specfile for rpmbuild * added missing [Install] unit to systemd service unit * added SELinux module to grant python-validity the required permissions
19 lines
456 B
Text
19 lines
456 B
Text
|
|
module python3-validity 1.0;
|
|
|
|
require {
|
|
type init_tmp_t;
|
|
type usr_t;
|
|
type usb_device_t;
|
|
type init_t;
|
|
class chr_file { ioctl open read write };
|
|
class file { execute map write };
|
|
}
|
|
|
|
#============= init_t ==============
|
|
|
|
#!!!! This avc can be allowed using the boolean 'domain_can_mmap_files'
|
|
allow init_t init_tmp_t:file map;
|
|
allow init_t init_tmp_t:file execute;
|
|
allow init_t usb_device_t:chr_file { ioctl open read write };
|
|
allow init_t usr_t:file write;
|