selinux-policy/policy/modules/roles/unprivuser.te

policy_module(unprivuser, 2.1.1)

# this module should be named user, but that is
# a compile error since user is a keyword.

########################################
#
# Declarations
#

role user_r;

userdom_unpriv_user_template(user)

fs_exec_noxattr(user_t)

optional_policy(`
	apache_role(user_r, user_t)
')

optional_policy(`
	mozilla_run_plugin(user_t, user_r)
')

ifndef(`distro_redhat',`
optional_policy(`
	auth_role(user_r, user_t)
')

optional_policy(`
	bluetooth_role(user_r, user_t)
')

optional_policy(`
	cdrecord_role(user_r, user_t)
')

optional_policy(`
	cron_role(user_r, user_t)
')

optional_policy(`
	dbus_role_template(user, user_r, user_t)
')

optional_policy(`
	evolution_role(user_r, user_t)
')

optional_policy(`
	games_role(user_r, user_t)
')

optional_policy(`
	gift_role(user_r, user_t)
')

optional_policy(`
	gnome_role(user_r, user_t)
')

optional_policy(`
	gpg_role(user_r, user_t)
')

optional_policy(`
	irc_role(user_r, user_t)
')

optional_policy(`
	java_role(user_r, user_t)
')

optional_policy(`
	lockdev_role(user_r, user_t)
')

optional_policy(`
	lpd_role(user_r, user_t)
')

optional_policy(`
	mozilla_role(user_r, user_t)
')

optional_policy(`
	mplayer_role(user_r, user_t)
')

optional_policy(`
	mta_role(user_r, user_t)
')

optional_policy(`
	oident_manage_user_content(user_t)
	oident_relabel_user_content(user_t)
')

optional_policy(`
	postgresql_role(user_r, user_t)
')

optional_policy(`
	pyzor_role(user_r, user_t)
')

optional_policy(`
	razor_role(user_r, user_t)
')

optional_policy(`
	rssh_role(user_r, user_t)
')
')

optional_policy(`
	rpm_dontaudit_dbus_chat(user_t)
')

optional_policy(`
	rtkit_scheduled(user_t)
')

optional_policy(`
	sandbox_transition(user_t, user_r)
')

optional_policy(`
	screen_role_template(user, user_r, user_t)
')

optional_policy(`
	telepathy_dbus_session_role(user_r, user_t)
')

ifndef(`distro_redhat',`
optional_policy(`
	spamassassin_role(user_r, user_t)
')

optional_policy(`
	ssh_role_template(user, user_r, user_t)
')

optional_policy(`
	su_role_template(user, user_r, user_t)
')

optional_policy(`
	sudo_role_template(user, user_r, user_t)
')

optional_policy(`
	thunderbird_role(user_r, user_t)
')

optional_policy(`
	tvtime_role(user_r, user_t)
')

optional_policy(`
	uml_role(user_r, user_t)
')

optional_policy(`
	userhelper_role_template(user, user_r, user_t)
')

optional_policy(`
	vmware_role(user_r, user_t)
')

optional_policy(`
	wireshark_role(user_r, user_t)
')

')

optional_policy(`
	setroubleshoot_dontaudit_stream_connect(user_t)
')

optional_policy(`
	xserver_role(user_r, user_t)
')