access_vectors revision cbc8f796551151c0d9651500d5d9f116177a07dc
12dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 22dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define common prefixes for access vectors 32dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 42dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# common common_name { permission_name ... } 52dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 62dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 72dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 82dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define a common prefix for file access vectors. 92dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleycommon file 122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley ioctl 142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley lock 202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelfrom 212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelto 222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley append 232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley unlink 242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley link 252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rename 262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execute 272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley swapon 282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley quotaon 292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley mounton 302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define a common prefix for socket access vectors. 352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleycommon socket 382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# inherited from file 402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley ioctl 412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley lock 472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelfrom 482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelto 492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley append 502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# socket-specific 512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley bind 522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley connect 532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley listen 542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley accept 552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getopt 562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setopt 572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley shutdown 582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley recvfrom 592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sendto 602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley recv_msg 612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley send_msg 622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley name_bind 632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define a common prefix for ipc access vectors. 672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleycommon ipc 702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley associate 782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley unix_read 792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley unix_write 802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define a common prefix for userspace database object access vectors. 842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleycommon database 872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley drop 902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelfrom 932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelto 942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define a common prefix for pointer and keyboard access vectors. 982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleycommon x_device 1012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 1032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 1042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use 1052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 1062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 1072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getfocus 1082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setfocus 1092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley bell 1102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley force_cursor 1112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley freeze 1122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley grab 1132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley manage 1142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley list_property 1152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley get_property 1162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley set_property 1172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley add 1182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley remove 1192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 1202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 1212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 1222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 1242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vectors. 1252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 1262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# class class_name [ inherits common_name ] { permission_name ... } 1272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 1302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for file-related objects. 1312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 1322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass filesystem 1342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley mount 1362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley remount 1372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley unmount 1382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 1392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelfrom 1402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelto 1412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley transition 1422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley associate 1432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley quotamod 1442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley quotaget 1452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 1462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass dir 1482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits file 1492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley add_name 1512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley remove_name 1522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley reparent 1532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley search 1542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rmdir 1552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley open 1562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_access 1572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmod 1582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 1592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass file 1612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits file 1622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execute_no_trans 1642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley entrypoint 1652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmod 1662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley open 1672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_access 1682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 1692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass lnk_file 1712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits file 1722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley open 1742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_access 1752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmod 1762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 1772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass chr_file 1792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits file 1802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execute_no_trans 1822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley entrypoint 1832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmod 1842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley open 1852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_access 1862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 1872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass blk_file 1892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits file 1902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley open 1922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_access 1932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmod 1942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 1952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 1962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass sock_file 1972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits file 1982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 1992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley open 2002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_access 2012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmod 2022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass fifo_file 2052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits file 2062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley open 2082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_access 2092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmod 2102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass fd 2132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use 2152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 2192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for network-related objects. 2202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 2212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass socket 2232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass tcp_socket 2262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley connectto 2292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley newconn 2302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley acceptfrom 2312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley node_bind 2322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley name_connect 2332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass udp_socket 2362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley node_bind 2392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass rawip_socket 2422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley node_bind 2452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass node 2482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley tcp_recv 2502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley tcp_send 2512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley udp_recv 2522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley udp_send 2532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rawip_recv 2542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rawip_send 2552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley enforce_dest 2562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley dccp_recv 2572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley dccp_send 2582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley recvfrom 2592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sendto 2602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netif 2632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley tcp_recv 2652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley tcp_send 2662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley udp_recv 2672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley udp_send 2682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rawip_recv 2692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rawip_send 2702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley dccp_recv 2712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley dccp_send 2722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley ingress 2732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley egress 2742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_socket 2772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass packet_socket 2802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass key_socket 2832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass unix_stream_socket 2862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 2882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley connectto 2892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley newconn 2902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley acceptfrom 2912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 2922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass unix_dgram_socket 2942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 2952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 2962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 2972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for process-related objects 2982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 2992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass process 3012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 3022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley fork 3032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley transition 3042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sigchld # commonly granted from child to parent 3052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sigkill # cannot be caught or ignored 3062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sigstop # cannot be caught or ignored 3072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley signull # for kill(pid, 0) 3082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley signal # all other signals 3092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley ptrace 3102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getsched 3112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setsched 3122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getsession 3132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getpgid 3142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setpgid 3152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getcap 3162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setcap 3172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley share 3182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 3192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setexec 3202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setfscreate 3212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley noatsecure 3222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley siginh 3232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setrlimit 3242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rlimitinh 3252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley dyntransition 3262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setcurrent 3272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execmem 3282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execstack 3292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execheap 3302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setkeycreate 3312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setsockcreate 3322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 3332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 3362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for ipc-related objects 3372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 3382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass ipc 3402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits ipc 3412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass sem 3432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits ipc 3442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass msgq 3462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits ipc 3472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 3482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley enqueue 3492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 3502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass msg 3522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 3532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley send 3542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley receive 3552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 3562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass shm 3582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits ipc 3592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 3602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley lock 3612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 3622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 3652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for the security server. 3662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 3672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass security 3692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 3702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley compute_av 3712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley compute_create 3722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley compute_member 3732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley check_context 3742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley load_policy 3752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley compute_relabel 3762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley compute_user 3772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setenforce # was avc_toggle in system class 3782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setbool 3792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setsecparam 3802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setcheckreqprot 3812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read_policy 3822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 3832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 3862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for system operations. 3872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 3882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass system 3902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 3912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley ipc_info 3922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley syslog_read 3932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley syslog_mod 3942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley syslog_console 3952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley module_request 3962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 3972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 3982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 3992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for controling capabilies 4002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 4012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 4022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass capability 4032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 4042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley # The capabilities are defined in include/linux/capability.h 4052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley # Capabilities >= 32 are defined in the capability2 class. 4062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley # Care should be taken to ensure that these are consistent with 4072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley # those definitions. (Order matters) 4082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 4092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley chown 4102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley dac_override 4112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley dac_read_search 4122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley fowner 4132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley fsetid 4142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley kill 4152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setgid 4162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setuid 4172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setpcap 4182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley linux_immutable 4192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley net_bind_service 4202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley net_broadcast 4212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley net_admin 4222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley net_raw 4232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley ipc_lock 4242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley ipc_owner 4252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_module 4262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_rawio 4272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_chroot 4282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_ptrace 4292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_pacct 4302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_admin 4312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_boot 4322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_nice 4332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_resource 4342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_time 4352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sys_tty_config 4362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley mknod 4372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley lease 4382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_write 4392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley audit_control 4402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setfcap 4412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 4422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 4432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass capability2 4442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 4452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley mac_override # unused by SELinux 4462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley mac_admin # unused by SELinux 4472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley syslog 448a1ce2fa2218a768823a7c39426983a248b6e4f50Stephen Smalley wake_alarm 449a1ce2fa2218a768823a7c39426983a248b6e4f50Stephen Smalley block_suspend 4502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 4512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 4522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 4532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for controlling 4542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# changes to passwd information. 4552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 4562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass passwd 4572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 4582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley passwd # change another user passwd 4592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley chfn # change another user finger info 4602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley chsh # change another user shell 4612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley rootok # pam_rootok check (skip auth) 4622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley crontab # crontab on another user 4632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 4642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 4652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 4662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# SE-X Windows stuff 4672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 4682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_drawable 4692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 4702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 4712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 4722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 4732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 4742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley blend 4752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 4762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 4772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley list_child 4782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley add_child 4792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley remove_child 4802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley list_property 4812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley get_property 4822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley set_property 4832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley manage 4842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley override 4852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley show 4862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley hide 4872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley send 4882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley receive 4892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 4902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 4912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_screen 4922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 4932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 4942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 4952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley hide_cursor 4962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley show_cursor 4972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley saver_getattr 4982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley saver_setattr 4992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley saver_hide 5002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley saver_show 5012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_gc 5042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 5062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 5072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 5092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use 5102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_font 5132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 5152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 5162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley add_glyph 5182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley remove_glyph 5192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use 5202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_colormap 5232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 5252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 5262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 5272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 5282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley add_color 5302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley remove_color 5312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley install 5322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley uninstall 5332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use 5342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_property 5372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 5392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 5402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 5412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 5422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley append 5432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 5452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_selection 5482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 5502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 5512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 5532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_cursor 5562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 5582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 5592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 5602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 5612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 5632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use 5642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_client 5672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley destroy 5692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 5712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley manage 5722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_device 5752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits x_device 5762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_server 5782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getattr 5802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 5812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley record 5822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley debug 5832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley grab 5842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley manage 5852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_extension 5882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley query 5902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use 5912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_resource 5942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 5952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 5962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 5972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 5982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 5992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_event 6002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley send 6022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley receive 6032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_synthetic_event 6062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley send 6082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley receive 6092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 6122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Extended Netlink classes 6132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 6142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_route_socket 6152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_read 6182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_write 6192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_firewall_socket 6222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_read 6252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_write 6262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_tcpdiag_socket 6292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_read 6322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_write 6332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_nflog_socket 6362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_xfrm_socket 6392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_read 6422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_write 6432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_selinux_socket 6462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_audit_socket 6492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_read 6522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_write 6532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_relay 6542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_readpriv 6552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_tty_audit 6562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_ip6fw_socket 6592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_read 6622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley nlmsg_write 6632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_dnrt_socket 6662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 6672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for controlling 6692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# access and communication through the D-BUS messaging 6702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# system. 6712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 6722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass dbus 6732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley acquire_svc 6752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley send_msg 6762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for controlling 6792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# access through the name service cache daemon (nscd). 6802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 6812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass nscd 6822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 6832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getpwd 6842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getgrp 6852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley gethost 6862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getstat 6872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley admin 6882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley shmempwd 6892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley shmemgrp 6902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley shmemhost 6912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley getserv 6922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley shmemserv 6932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 6942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 6952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Define the access vector interpretation for controlling 6962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# access to IPSec network data by association 6972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# 6982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass association 6992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley sendto 7012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley recvfrom 7022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setcontext 7032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley polmatch 7042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# Updated Netlink class for KOBJECT_UEVENT family. 7072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass netlink_kobject_uevent_socket 7082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 7092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass appletalk_socket 7112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 7122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass packet 7142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley send 7162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley recv 7172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelto 7182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley flow_in # deprecated 7192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley flow_out # deprecated 7202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley forward_in 7212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley forward_out 7222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass key 7252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley view 7272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 7282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 7292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley search 7302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley link 7312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley setattr 7322dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create 7332dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7342dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass context 7362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley translate 7382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley contains 7392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass dccp_socket 7422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 7432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley node_bind 7452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley name_connect 7462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass memprotect 7492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley mmap_zero 7512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_database 7542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 7552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley access 7572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley install_module 7582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley load_module 7592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley get_param # deprecated 7602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley set_param # deprecated 7612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_table 7642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 7652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use # deprecated 7672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley select 7682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley update 7692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley insert 7702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley delete 7712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley lock 7722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_procedure 7752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 7762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execute 7782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley entrypoint 7792dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley install 7802dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7812dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7822dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_column 7832dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 7842dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7852dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use # deprecated 7862dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley select 7872dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley update 7882dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley insert 7892dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 7902dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 7912dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_tuple 7922dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 7932dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelfrom 7942dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley relabelto 7952dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use # deprecated 7962dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley select 7972dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley update 7982dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley insert 7992dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley delete 8002dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8012dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8022dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_blob 8032dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 8042dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8052dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley read 8062dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley write 8072dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley import 8082dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley export 8092dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8102dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8112dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley# network peer labels 8122dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass peer 8132dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8142dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley recv 8152dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8162dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8172dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_application_data 8182dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8192dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley paste 8202dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley paste_after_confirm 8212dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley copy 8222dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8232dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8242dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass kernel_service 8252dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8262dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley use_as_override 8272dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley create_files_as 8282dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8292dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8302dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass tun_socket 8312dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits socket 832d7af45d3741648c45560797a5b6f02dec784668fNick Kralevich{ 833d7af45d3741648c45560797a5b6f02dec784668fNick Kralevich attach_queue 834d7af45d3741648c45560797a5b6f02dec784668fNick Kralevich} 8352dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8362dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_pointer 8372dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits x_device 8382dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8392dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass x_keyboard 8402dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits x_device 8412dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8422dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_schema 8432dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 8442dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8452dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley search 8462dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley add_name 8472dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley remove_name 8482dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8492dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8502dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_view 8512dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 8522dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8532dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley expand 8542dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8552dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8562dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_sequence 8572dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 8582dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8592dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley get_value 8602dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley next_value 8612dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley set_value 8622dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8632dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8642dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass db_language 8652dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyinherits database 8662dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8672dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley implement 8682dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley execute 8692dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8702dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 8712dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalleyclass binder 8722dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley{ 8732dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley impersonate 8742dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley call 8752dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley set_context_mgr 8762dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley transfer 8772dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley} 8782dd4e51d5c2a2dfc0bfdee9303269f5a665f6e3Stephen Smalley 879124720a6976a69357522299afbe5591854e40775Stephen Smalleyclass property_service 880124720a6976a69357522299afbe5591854e40775Stephen Smalley{ 881124720a6976a69357522299afbe5591854e40775Stephen Smalley set 882124720a6976a69357522299afbe5591854e40775Stephen Smalley} 883f90c41f6e8d5c1266e154f46586a2ceb260f1be6Riley Spahn 884f90c41f6e8d5c1266e154f46586a2ceb260f1be6Riley Spahnclass service_manager 885f90c41f6e8d5c1266e154f46586a2ceb260f1be6Riley Spahn{ 886f90c41f6e8d5c1266e154f46586a2ceb260f1be6Riley Spahn add 887b8511e0d98880a683c276589ab7d8d7666b7f8c1Riley Spahn find 888b8511e0d98880a683c276589ab7d8d7666b7f8c1Riley Spahn list 889f90c41f6e8d5c1266e154f46586a2ceb260f1be6Riley Spahn} 8901196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn 8911196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahnclass keystore_key 8921196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn{ 893cbc8f796551151c0d9651500d5d9f116177a07dcChad Brubaker get_state 8941196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn get 8951196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn insert 8961196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn delete 8971196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn exist 898cbc8f796551151c0d9651500d5d9f116177a07dcChad Brubaker list 8991196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn reset 9001196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn password 9011196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn lock 9021196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn unlock 903cbc8f796551151c0d9651500d5d9f116177a07dcChad Brubaker is_empty 9041196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn sign 9051196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn verify 9061196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn grant 9071196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn duplicate 9081196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn clear_uid 9098927772caa421f1c9ccc80337527e039353d65ddChad Brubaker add_auth 910520bb816b86fe36440767db6e2f05fb4e8a08f3eChad Brubaker user_changed 9111196d2a5763c9a99be99ba81a4a29d938a83cc06Riley Spahn} 912ba992496f01e40a10d9749bb25b6498138e607fbStephen Smalley 913ba992496f01e40a10d9749bb25b6498138e607fbStephen Smalleyclass debuggerd 914ba992496f01e40a10d9749bb25b6498138e607fbStephen Smalley{ 915ba992496f01e40a10d9749bb25b6498138e607fbStephen Smalley dump_tombstone 916ba992496f01e40a10d9749bb25b6498138e607fbStephen Smalley dump_backtrace 917ba992496f01e40a10d9749bb25b6498138e607fbStephen Smalley} 91870f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn 91970f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahnclass drmservice { 92070f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn consumeRights 92170f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn setPlaybackStatus 92270f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn openDecryptSession 92370f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn closeDecryptSession 92470f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn initializeDecryptUnit 92570f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn decrypt 92670f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn finalizeDecryptUnit 92770f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn pread 92870f75ce9e5975df47d0ccb32660bb618c22ef181Riley Spahn} 929