Re: TTY question

[Ivan Gyurdiev <ivg2@xxxxxxxxxxx>]

On Thu, 2005-02-10 at 08:48 -0500, Ivan Gyurdiev wrote:
>>Why not just:
>># access_terminal(domain, typeprefix)
>>define(`access_terminal', `
>>allow $1 $2_tty_device_t:chr_file rw_file_perms;
>>allow $1 devtty_t:chr_file rw_file_perms;
>>allow $1 devpts_t:dir r_dir_perms;
>>allow $1 $2_devpts_t:chr_file rw_file_perms;
>>') dnl access_terminal
>>
>>Then the usage in e.g. x_client_domain becomes:
>>access_terminal($1_$2_t, $1)
>>
>>whereas elsewhere it may just be:
>>access_terminal($1_t, $1) 

Should 
allow $1 privfd:fd use;
be in that macro? 

What does that do?
I see it next to the other rules.

-- 
Ivan Gyurdiev <ivg2@xxxxxxxxxxx>
Cornell University


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.