selinux-policy/policy/modules/roles/guest.te

policy_module(guest, 1.1.1)

########################################
#
# Declarations
#

role guest_r;

userdom_restricted_user_template(guest)

kernel_read_system_state(guest_t)

########################################
#
# Local policy
#

optional_policy(`
	apache_role(guest_r, guest_t)
')

gen_user(guest_u, user, guest_r, s0, s0)
Guest patch from Dan Walsh. Dominic asked to remove mono and java from guest_t 2010-07-06 12:35:56 +00:00			`policy_module(guest, 1.1.1)`
trunk: 6 patches from dan. 2009-03-31 13:40:59 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

trunk: fix typo in guest role decl. 2009-07-08 15:23:29 +00:00			`role guest_r;`
trunk: 6 patches from dan. 2009-03-31 13:40:59 +00:00
			`userdom_restricted_user_template(guest)`

Allow guest to run ps command on its processes by allowing it to read /proc 2010-09-25 11:07:04 +00:00			`kernel_read_system_state(guest_t)`

trunk: 6 patches from dan. 2009-03-31 13:40:59 +00:00			`########################################`
			`#`
			`# Local policy`
			`#`

UPdate for f14 policy 2010-08-26 13:41:21 +00:00			optional_policy(`
			`apache_role(guest_r, guest_t)`
			`')`

			`gen_user(guest_u, user, guest_r, s0, s0)`