Skip to contentSkip to conversation

Add "binder" security class and access vectors

PATCH New Laurent Bigonville 2 participants 2 messages May 6, 2015 – May 8, 2015

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 Add "binder" security class and access vectors

From: Laurent Bigonville <[email protected]>

---
 policy/flask/access_vectors   | 8 ++++++++
 policy/flask/security_classes | 2 ++
 2 files changed, 10 insertions(+)
policy/flask/access_vectors +8 -0
index bea72a0..97665b4 100644
@@ -844,6 +844,14 @@ inherits socket
 	attach_queue
 }
 
+class binder
+{
+	impersonate
+	call
+	set_context_mgr
+	transfer
+}
+
 class x_pointer
 inherits x_device
 
policy/flask/security_classes +2 -0
index c9cf486..ca7eb41 100644
@@ -123,6 +123,8 @@ class kernel_service
 
 class tun_socket
 
+class binder
+
 # Still More SE-X Windows stuff
 class x_pointer			# userspace
 class x_keyboard		# userspace
Signature · 1 line
2.1.4
#1 lore raw

PATCH 1/1 Add "binder" security class and access vectors

Quoted 31 lines · Laurent Bigonville

From: Laurent Bigonville <[email protected]>

---
 policy/flask/access_vectors   | 8 ++++++++
 policy/flask/security_classes | 2 ++
 2 files changed, 10 insertions(+)
policy/flask/access_vectors +8 -0
index bea72a0..97665b4 100644
@@ -844,6 +844,14 @@ inherits socket
 	attach_queue
 }
 
+class binder
+{
+	impersonate
+	call
+	set_context_mgr
+	transfer
+}
+
 class x_pointer
 inherits x_device
 
policy/flask/security_classes +0 -0
index c9cf486..ca7eb41 100644

policy/flask/security_classes class kernel_service · line 130

Quoted 8 lines
policy/flask/security_classes +2 -0
@@ -123,6 +123,8 @@ class kernel_service
 
 class tun_socket
 
+class binder
+
 # Still More SE-X Windows stuff
 class x_pointer			# userspace
 class x_keyboard		# userspace

Merged.

Signature · 3 lines
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com