xref: /titanic_51/usr/src/uts/sparc/os/device_policy (revision 3e7352aecf183df6c5f819be775df62aadcdfd08)
1#
2# Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
3# Use is subject to license terms.
4#
5# CDDL HEADER START
6#
7# The contents of this file are subject to the terms of the
8# Common Development and Distribution License (the "License").
9# You may not use this file except in compliance with the License.
10#
11# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
12# or http://www.opensolaris.org/os/licensing.
13# See the License for the specific language governing permissions
14# and limitations under the License.
15#
16# When distributing Covered Code, include this CDDL HEADER in each
17# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
18# If applicable, add the following below this CDDL HEADER, with the
19# fields enclosed by brackets "[]" replaced with your own identifying
20# information: Portions Copyright [yyyy] [name of copyright owner]
21#
22# CDDL HEADER END
23#
24# Device policy configuration file.   When devices are opened the
25# additional access controls in this file are enforced.
26#
27# The format of this file is subject to change without notice.
28#
29# Default open privileges, must be first entry in the file.
30#
31
32*		read_priv_set=none		write_priv_set=none
33
34#
35# Kernel memory devices.
36#
37mm:allkmem	read_priv_set=all		write_priv_set=all
38mm:kmem		read_priv_set=none		write_priv_set=all
39mm:mem		read_priv_set=none		write_priv_set=all
40
41rtvc:rtvc*					write_priv_set=none
42rtvc:rtvcctl*					write_priv_set=sys_config
43#
44# Socket interface access permissions.
45#
46icmp		read_priv_set=net_icmpaccess	write_priv_set=net_icmpaccess
47icmp6		read_priv_set=net_icmpaccess	write_priv_set=net_icmpaccess
48ip		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
49ip6		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
50keysock		read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
51ipsecah		read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
52ipsecesp	read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
53spdsock		read_priv_set=sys_ip_config	write_priv_set=sys_ip_config
54#
55# Raw network interface access permissions
56#
57ce		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
58eri		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
59ge		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
60hme		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
61ibd		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
62pcelx		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
63qfe		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
64aggr		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
65vnic		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
66softmac		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
67#
68# Virtual network interface access permission
69#
70vni		read_priv_set=net_rawaccess	write_priv_set=net_rawaccess
71
72#
73# IP observability device access permission
74#
75ipnet		read_priv_set=net_observability write_priv_set=net_observability
76
77#
78# Disk devices.
79#
80md:admin					write_priv_set=sys_config
81fssnap:ctl	read_priv_set=sys_config	write_priv_set=sys_config
82scsi_vhci:devctl				write_priv_set=sys_devices
83#
84# Other devices that require a privilege to open.
85#
86envctrltwo	read_priv_set=sys_config	write_priv_set=sys_config
87random						write_priv_set=sys_devices
88openeepr					write_priv_set=all
89#
90# IP Filter
91#
92ipf             read_priv_set=sys_ip_config     write_priv_set=sys_ip_config
93
94