56 lines
1.3 KiB
Plaintext
56 lines
1.3 KiB
Plaintext
|
#
|
||
|
|
# GNOME VFS daemon
|
||
|
|
#
|
||
|
|
# Author: Ivan Gyurdiev <ivg2@cornell.edu>
|
||
|
|
#
|
||
|
|
|
||
|
|
#######################################
|
||
|
|
# gnome_vfs_domain(role_prefix)
|
||
|
|
#
|
||
|
|
|
||
|
|
define(`gnome_vfs_domain', `
|
||
|
|
|
||
|
|
# Type for daemon
|
||
|
|
type $1_gnome_vfs_t, domain, nscd_client_domain;
|
||
|
|
|
||
|
|
# GNOME, dbus
|
||
|
|
gnome_application($1_gnome_vfs, $1)
|
||
|
|
dbusd_client(system, $1_gnome_vfs)
|
||
|
|
allow $1_gnome_vfs_t system_dbusd_t:dbus send_msg;
|
||
|
|
ifdef(`hald.te', `
|
||
|
|
allow $1_gnome_vfs_t hald_t:dbus send_msg;
|
||
|
|
allow hald_t $1_gnome_vfs_t:dbus send_msg;
|
||
|
|
')
|
||
|
|
|
||
|
|
# Transition from user type
|
||
|
|
domain_auto_trans($1_t, gnome_vfs_exec_t, $1_gnome_vfs_t)
|
||
|
|
role $1_r types $1_gnome_vfs_t;
|
||
|
|
|
||
|
|
# Stat top level directories on mount_points (check free space?)
|
||
|
|
allow $1_gnome_vfs_t { fs_type default_t boot_t home_root_t device_t }:dir getattr;
|
||
|
|
|
||
|
|
# Search path to /home (??)
|
||
|
|
allow $1_gnome_vfs_t home_root_t:dir search;
|
||
|
|
allow $1_gnome_vfs_t $1_home_dir_t:dir search;
|
||
|
|
|
||
|
|
# Search path to rpc_pipefs mount point (??)
|
||
|
|
allow $1_gnome_vfs_t var_lib_nfs_t:dir search;
|
||
|
|
allow $1_gnome_vfs_t var_lib_t:dir search;
|
||
|
|
|
||
|
|
# Search libexec (??)
|
||
|
|
allow $1_gnome_vfs_t bin_t:dir search;
|
||
|
|
can_exec($1_gnome_vfs_t, bin_t)
|
||
|
|
|
||
|
|
') dnl gnome_vfs_domain
|
||
|
|
|
||
|
|
#####################################
|
||
|
|
# gnome_vfs_client(prefix, role_prefix)
|
||
|
|
#
|
||
|
|
|
||
|
|
define(`gnome_vfs_client', `
|
||
|
|
|
||
|
|
# Connect over bonobo
|
||
|
|
bonobo_connect($1, $2_gnome_vfs)
|
||
|
|
|
||
|
|
') dnl gnome_vfs_client
|