Research Menu

.
Skip Search Box

SELinux Mailing List

audio-entropyd policy

From: Joshua Brindle <jbrindle_at_snu.edu>
Date: Sat, 10 Apr 2004 18:29:35 -0500


audio-entropyd available at http://www.vanheusden.com/aed/ adds entropy from sound devices (after being cleansed and hashed). This is particularly useful on headless servers which don't get any mouse/keyboard related entropy. The policy was written by Chris Pebenito.

Joshua Brindle

#DESC audio-entropyd - Generate entropy from audio input
#
# Author: Chris PeBenito <pebenito@gentoo.org>
#

daemon_domain(entropyd)

allow entropyd_t self:capability { ipc_lock sys_admin };

allow entropyd_t random_device_t:chr_file rw_file_perms;
allow entropyd_t device_t:dir r_dir_perms;
allow entropyd_t sound_device_t:chr_file r_file_perms;

/usr/sbin/audio-entropyd -- system_u:object_r:entropyd_exec_t

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Sat 10 Apr 2004 - 19:29:41 EDT
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service