Confine the switcheroo-control service

Resolves: RHEL-24268
fedora-selinux · Jan 14, 2025 · a2c6c8b · a2c6c8b
1 parent 97be274
commit a2c6c8b
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/policy/modules/contrib/switcheroo.fc b/policy/modules/contrib/switcheroo.fc
@@ -0,0 +1 @@
+/usr/libexec/switcheroo-control	--	gen_context(system_u:object_r:switcheroo_control_exec_t,s0)
diff --git a/policy/modules/contrib/switcheroo.if b/policy/modules/contrib/switcheroo.if
@@ -0,0 +1 @@
+## <summary>switcheroo: D-Bus service to check dual GPU availability</summary>
diff --git a/policy/modules/contrib/switcheroo.te b/policy/modules/contrib/switcheroo.te
@@ -0,0 +1,14 @@
+policy_module(switcheroo, 1.0)
+
+#################################
+#   
+# Declarations
+#    
+
+type switcheroo_control_t;
+type switcheroo_control_exec_t;
+init_daemon_domain(switcheroo_control_t, switcheroo_control_exec_t)
+permissive switcheroo_control_t;
+
+#type samba_bgqd_var_run_t;
+#files_pid_file(samba_bgqd_var_run_t)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		/usr/libexec/switcheroo-control -- gen_context(system_u:object_r:switcheroo_control_exec_t,s0)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		## <summary>switcheroo: D-Bus service to check dual GPU availability</summary>