28 lines
920 B
Plaintext
28 lines
920 B
Plaintext
module xrdp 1.0.3;
|
|
|
|
require {
|
|
type unconfined_service_t;
|
|
type unconfined_t;
|
|
type unlabeled_t;
|
|
type xserver_exec_t;
|
|
type oddjob_t;
|
|
type oddjob_mkhomedir_exec_t;
|
|
class process transition;
|
|
class process2 nnp_transition;
|
|
class file entrypoint;
|
|
class process2 nnp_transition;
|
|
class vsock_socket { getattr read write };
|
|
}
|
|
|
|
#============= unconfined_service_t ==============
|
|
allow unconfined_service_t unconfined_t:process transition;
|
|
allow unconfined_service_t unconfined_t:process2 nnp_transition;
|
|
allow unconfined_service_t oddjob_mkhomedir_exec_t:file entrypoint;
|
|
allow unconfined_service_t unlabeled_t:vsock_socket { getattr read write };
|
|
|
|
#============= unconfined_t ==============
|
|
allow unconfined_t xserver_exec_t:file entrypoint;
|
|
|
|
#============= oddjob_t ==============
|
|
allow oddjob_t unconfined_service_t:process transition;
|