sepolicy/sswap.te

   1 type sswap, domain;
   2 type sswap_exec, exec_type, file_type;
   3 type sswap_device, dev_type;
   4
   5 init_daemon_domain(sswap);
   6
   7 allow sswap sswap_device:blk_file { read write open };
   8 allow sswap rootfs:file { entrypoint read };
   9 allow sswap block_device:dir search;
  10 allow sswap self:capability sys_admin;
  11
  12 allow sswap proc:file { open getattr read };
  13 allow sswap proc_meminfo:file { open read getattr };
  14 allow sswap property_socket:sock_file write;
  15 allow sswap init:unix_stream_socket connectto;
  16
  17 allow sswap properties_device:dir { read open };
  18 allow sswap proc_stat:dir { read open getattr };
  19 allow sswap proc_stat:file { read open getattr };
  20
  21 set_prop(sswap, sswap_prop)