selinux-policy/refpolicy/policy/modules/services/slrnpull.if

39 lines
889 B
Plaintext
Raw Normal View History

2006-01-04 20:44:30 +00:00
## <summary>Service for downloading news feeds the slrn newsreader.</summary>
########################################
## <summary>
## Allow the domain to search slrnpull spools.
## </summary>
## <param name="pty_type">
## domain allowed access
## </param>
#
interface(`slrnpull_search_spool',`
gen_require(`
type slrnpull_spool_t;
')
files_search_spool($1)
allow $1 slrnpull_spool_t:dir search_dir_perms;
')
########################################
## <summary>
## Allow the domain to create, read,
## write, and delete slrnpull spools.
## </summary>
## <param name="pty_type">
## domain allowed access
## </param>
#
interface(`slrnpull_manage_spool',`
gen_require(`
type slrnpull_spool_t;
')
files_search_spool($1)
allow $1 slrnpull_spool_t:dir create_dir_perms;
allow $1 slrnpull_spool_t:file create_file_perms;
allow $1 slrnpull_spool_t:lnk_file create_lnk_perms;
')