Add new interface boltd_dbus_chat()

fedora-selinux · Apr 23, 2019 · 77dce4d · 77dce4d
1 parent dcd78fc
commit 77dce4d
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/boltd.if b/boltd.if
@@ -211,3 +211,23 @@ interface(`boltd_write_var_run_pipes',`
 	allow $1 boltd_var_run_t:fd use;
 	allow $1 boltd_var_run_t:fifo_file write;
 ')
+
+########################################
+## <summary>
+##	Send messages to boltd over dbus.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`boltd_dbus_chat',`
+	gen_require(`
+		type boltd_t;
+		class dbus send_msg;
+	')
+
+	allow $1 boltd_t:dbus send_msg;
+	allow boltd_t $1:dbus send_msg;
+')