• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1#####################################
2# Common groupings of object classes.
3#
4define(`capability_class_set', `{ capability capability2 cap_userns cap2_userns }')
5define(`global_capability_class_set', `{ capability cap_userns }')
6define(`global_capability2_class_set', `{ capability2 cap2_userns }')
7
8define(`devfile_class_set', `{ chr_file blk_file }')
9define(`notdevfile_class_set', `{ file lnk_file sock_file fifo_file }')
10define(`file_class_set', `{ devfile_class_set notdevfile_class_set }')
11define(`dir_file_class_set', `{ dir file_class_set }')
12
13define(`socket_class_set', `{ socket tcp_socket udp_socket rawip_socket netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_dnrt_socket netlink_kobject_uevent_socket tun_socket netlink_iscsi_socket netlink_fib_lookup_socket netlink_connector_socket netlink_netfilter_socket netlink_generic_socket netlink_scsitransport_socket netlink_rdma_socket netlink_crypto_socket sctp_socket icmp_socket ax25_socket ipx_socket netrom_socket atmpvc_socket x25_socket rose_socket decnet_socket atmsvc_socket rds_socket irda_socket pppox_socket llc_socket can_socket tipc_socket bluetooth_socket iucv_socket rxrpc_socket isdn_socket phonet_socket ieee802154_socket caif_socket alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket smc_socket xdp_socket }')
14define(`dgram_socket_class_set', `{ udp_socket unix_dgram_socket }')
15define(`stream_socket_class_set', `{ tcp_socket unix_stream_socket sctp_socket }')
16define(`unpriv_socket_class_set', `{ tcp_socket udp_socket unix_stream_socket unix_dgram_socket sctp_socket }')
17define(`network_socket_class_set', `{ icmp_socket rawip_socket tcp_socket udp_socket }')
18
19define(`ipc_class_set', `{ sem msgq shm ipc }')
20
21#####################################
22# Common groupings of permissions.
23#
24define(`x_file_perms', `{ getattr execute execute_no_trans map }')
25define(`r_file_perms', `{ getattr open read ioctl lock map }')
26define(`w_file_perms', `{ open append write lock map }')
27define(`rx_file_perms', `{ r_file_perms x_file_perms }')
28define(`ra_file_perms', `{ r_file_perms append }')
29define(`rw_file_perms', `{ r_file_perms w_file_perms }')
30define(`rwx_file_perms', `{ rw_file_perms x_file_perms }')
31define(`create_file_perms', `{ create rename setattr unlink rw_file_perms }')
32
33define(`r_dir_perms', `{ open getattr read search ioctl lock }')
34define(`w_dir_perms', `{ open search write add_name remove_name lock }')
35define(`ra_dir_perms', `{ r_dir_perms add_name write }')
36define(`rw_dir_perms', `{ r_dir_perms w_dir_perms }')
37define(`create_dir_perms', `{ create reparent rename rmdir setattr rw_dir_perms }')
38
39define(`r_ipc_perms', `{ getattr read associate unix_read }')
40define(`w_ipc_perms', `{ write unix_write }')
41define(`rw_ipc_perms', `{ r_ipc_perms w_ipc_perms }')
42define(`create_ipc_perms', `{ create setattr destroy rw_ipc_perms }')
43
44#####################################
45# Common socket permission sets.
46define(`rw_socket_perms', `{ ioctl read getattr write setattr lock append bind connect getopt setopt shutdown map }')
47define(`rw_socket_perms_no_ioctl', `{ read getattr write setattr lock append bind connect getopt setopt shutdown map }')
48define(`create_socket_perms', `{ create rw_socket_perms }')
49define(`create_socket_perms_no_ioctl', `{ create rw_socket_perms_no_ioctl }')
50define(`rw_stream_socket_perms', `{ rw_socket_perms listen accept }')
51define(`create_stream_socket_perms', `{ create rw_stream_socket_perms }')
52