1 type keystore, domain; 2 type keystore_exec, exec_type, file_type; 3 4 # keystore daemon 5 init_daemon_domain(keystore) 6 allow keystore keystore_data_file:dir create_dir_perms; 7 allow keystore keystore_data_file:notdevfile_class_set create_file_perms; 8 allow keystore keystore_exec:file { getattr }; 9 allow keystore tee_device:chr_file rw_file_perms; 10
