3.2 Integrated permissions for allowdev

In directory pointed by allowdev -root, following are additionally allowed for allowfile rules. By default, directory under /dev.

Table 22: Option:s

Object class	Permission	Domain	Type
blk_file	getattr	domain	type
chr_file

Table 23: Option:r

Object class	Permission	Domain	Type
blk_file	ioctl	domain	type
chr_file	lock
	read

Table 24: Option:x

Object class	Permission	Domain	Type
blk_file	execute	domain	type
chr_file

Table 25: Option:w

Object class	Permission	Domain	Type
blk_file	append	domain	type
chr_file	setattr
	write

Table 26: Option:o

Object class	Permission	Domain	Type
blk_file	write	domain	type
chr_file

Table 27: Option:a

Object class	Permission	Domain	Type
blk_file	append	domain	type
chr_file

Table 28: Option:e

Object class	Permission	Domain	Type
blk_file	rename	domain	type
chr_file	unlink

Table 29: Option:c

Object class	Permission	Domain	Type
blk_file	create	domain	type
chr_file	link

Table 30: Option:t

Object class	Permission	Domain	Type
blk_file	setattr	domain	type
chr_file