Re: [policy] post a message to logged in users

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, 2009-09-05 at 21:50 +0200, Stefan Schulze Frielinghaus wrote:
> is there an interface available to post a message to every logged in
> user, for example generated via /usr/bin/wall?

OK I'm pretty sure there is no interface for just writing to every
logged in user, the attached patch solves this.
I could use the "term_use_all_terms" interface but this is not really
what I wanted because /usr/bin/wall does not need to read all the
consoles/ptys/ttys. Write access is enough.

Chris, is this patch OK?
--- kernel/terminal.if	2009-09-06 15:04:36.000000000 +0200
+++ kernel/terminal.if	2009-09-06 15:09:19.000000000 +0200
@@ -178,6 +178,29 @@
 
 ########################################
 ## <summary>
+##      Write the console, all
+##      ttys and all ptys.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+## <rolecap/>
+#
+interface(`term_write_all_terms',`
+	gen_require(`
+		attribute ttynode, ptynode;
+		type console_device_t, devpts_t, tty_device_t;
+	')
+
+	dev_list_all_dev_nodes($1)
+	allow $1 devpts_t:dir list_dir_perms;
+	allow $1 { console_device_t tty_device_t ttynode ptynode }:chr_file write_chr_file_perms;
+')
+
+########################################
+## <summary>
 ##	Write to the console.
 ## </summary>
 ## <param name="domain">

[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux