blob: 7ea3a380cbd62c257e98cabd63825dec623854bd [file] [log] [blame]
Stephen Smalley2dd4e512012-01-04 12:33:27 -05001# FLASK
2
3#
4# Define the security object classes
5#
6
7# Classes marked as userspace are classes
8# for userspace object managers
9
10class security
11class process
12class system
13class capability
14
15# file-related classes
16class filesystem
17class file
18class dir
19class fd
20class lnk_file
21class chr_file
22class blk_file
23class sock_file
24class fifo_file
25
26# network-related classes
27class socket
28class tcp_socket
29class udp_socket
30class rawip_socket
31class node
32class netif
33class netlink_socket
34class packet_socket
35class key_socket
36class unix_stream_socket
37class unix_dgram_socket
38
39# sysv-ipc-related classes
40class sem
41class msg
42class msgq
43class shm
44class ipc
45
Stephen Smalley2dd4e512012-01-04 12:33:27 -050046# extended netlink sockets
47class netlink_route_socket
48class netlink_firewall_socket
49class netlink_tcpdiag_socket
50class netlink_nflog_socket
51class netlink_xfrm_socket
52class netlink_selinux_socket
53class netlink_audit_socket
54class netlink_ip6fw_socket
55class netlink_dnrt_socket
56
Stephen Smalley2dd4e512012-01-04 12:33:27 -050057# IPSec association
58class association
59
60# Updated Netlink class for KOBJECT_UEVENT family.
61class netlink_kobject_uevent_socket
62
63class appletalk_socket
64
65class packet
66
67# Kernel access key retention
68class key
69
Stephen Smalley2dd4e512012-01-04 12:33:27 -050070class dccp_socket
71
72class memprotect
73
Stephen Smalley2dd4e512012-01-04 12:33:27 -050074# network peer labels
75class peer
76
77# Capabilities >= 32
78class capability2
79
Stephen Smalley2dd4e512012-01-04 12:33:27 -050080# kernel services that need to override task security, e.g. cachefiles
81class kernel_service
82
83class tun_socket
84
Stephen Smalley2dd4e512012-01-04 12:33:27 -050085class binder
Stephen Smalley2dd4e512012-01-04 12:33:27 -050086
Stephen Smalley124720a2012-04-04 10:11:16 -040087# Property service
88class property_service # userspace
89
Riley Spahnf90c41f2014-06-05 15:52:02 -070090# Service manager
91class service_manager # userspace
92
Riley Spahn1196d2a2014-06-17 14:58:52 -070093# Keystore Key
94class keystore_key # userspace
95
Stephen Smalleyba992492014-07-24 15:25:43 -040096# debuggerd service
97class debuggerd # userspace
98
Riley Spahn70f75ce2014-07-02 12:42:59 -070099class drmservice # userspace
Stephen Smalley2dd4e512012-01-04 12:33:27 -0500100# FLASK