• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1# FLASK
2
3#
4# Define the security object classes
5#
6
7# Classes marked as userspace are classes
8# for userspace object managers
9
10class security
11class process
12class system
13class capability
14
15# file-related classes
16class filesystem
17class file
18class dir
19class fd
20class lnk_file
21class chr_file
22class blk_file
23class sock_file
24class fifo_file
25
26# network-related classes
27class socket
28class tcp_socket
29class udp_socket
30class rawip_socket
31class node
32class netif
33class netlink_socket
34class packet_socket
35class key_socket
36class unix_stream_socket
37class unix_dgram_socket
38
39# sysv-ipc-related classes
40class sem
41class msg
42class msgq
43class shm
44class ipc
45
46# extended netlink sockets
47class netlink_route_socket
48class netlink_tcpdiag_socket
49class netlink_nflog_socket
50class netlink_xfrm_socket
51class netlink_selinux_socket
52class netlink_audit_socket
53class netlink_dnrt_socket
54
55# IPSec association
56class association
57
58# Updated Netlink class for KOBJECT_UEVENT family.
59class netlink_kobject_uevent_socket
60
61class appletalk_socket
62
63class packet
64
65# Kernel access key retention
66class key
67
68class dccp_socket
69
70class memprotect
71
72# network peer labels
73class peer
74
75# Capabilities >= 32
76class capability2
77
78# kernel services that need to override task security, e.g. cachefiles
79class kernel_service
80
81class tun_socket
82
83class binder
84
85# Updated netlink classes for more recent netlink protocols.
86class netlink_iscsi_socket
87class netlink_fib_lookup_socket
88class netlink_connector_socket
89class netlink_netfilter_socket
90class netlink_generic_socket
91class netlink_scsitransport_socket
92class netlink_rdma_socket
93class netlink_crypto_socket
94
95# Capability checks when on a non-init user namespace
96class cap_userns
97class cap2_userns
98
99# New socket classes introduced by extended_socket_class policy capability.
100# These two were previously mapped to rawip_socket.
101class sctp_socket
102class icmp_socket
103# These were previously mapped to socket.
104class ax25_socket
105class ipx_socket
106class netrom_socket
107class atmpvc_socket
108class x25_socket
109class rose_socket
110class decnet_socket
111class atmsvc_socket
112class rds_socket
113class irda_socket
114class pppox_socket
115class llc_socket
116class can_socket
117class tipc_socket
118class bluetooth_socket
119class iucv_socket
120class rxrpc_socket
121class isdn_socket
122class phonet_socket
123class ieee802154_socket
124class caif_socket
125class alg_socket
126class nfc_socket
127class vsock_socket
128class kcm_socket
129class qipcrtr_socket
130class smc_socket
131
132# Property service
133class property_service          # userspace
134
135# Service manager
136class service_manager           # userspace
137
138# hardware service manager      # userspace
139class hwservice_manager
140
141# Keystore Key
142class keystore_key              # userspace
143
144class drmservice                # userspace
145# FLASK
146