rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add x_client_domain implementation

Browse Source
This commit is contained in:
Chris PeBenito 2006-02-15 16:30:48 +00:00
parent 0062f96bb4
commit 0a30b0086b
1 changed files with 20 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
docs/macro_conversion_guide
View File

@ -1197,11 +1197,11 @@ files_filetrans_tmp($1_t, $1_tmp_t, $3)
# #
type $1_tmpfs_t; type $1_tmpfs_t;
files_tmpfs_file($1_tmpfs_t) files_tmpfs_file($1_tmpfs_t)
allow $1_t $1_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write }; allow $1_t $1_tmpfs_t:dir rw_dir_perms;
allow $1_t $1_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename }; allow $1_t $1_tmpfs_t:file manage_file_perms;
allow $1_t $1_tmpfs_t:lnk_file { create read getattr setattr link unlink rename }; allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms;
allow $1_t $1_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename }; allow $1_t $1_tmpfs_t:sock_file manage_file_perms;
allow $1_t $1_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename }; allow $1_t $1_tmpfs_t:fifo_file manage_file_perms;
fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file }) fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file })
# #
@ -1254,3 +1254,18 @@ allow $1 $1_var_run_t:dir create_dir_perms;
allow $1 $1_var_run_t:lnk_file create_lnk_perms; allow $1 $1_var_run_t:lnk_file create_lnk_perms;
# else: # else:
allow $1 $1_var_run_t:$2 create_file_perms; allow $1 $1_var_run_t:$2 create_file_perms;
#
# x_client_domain($1,$2): complete
#
type $1_tmpfs_t;
files_tmpfs_file($1_tmpfs_t)
allow $1_t $1_tmpfs_t:dir rw_dir_perms;
allow $1_t $1_tmpfs_t:file manage_file_perms;
allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms;
allow $1_t $1_tmpfs_t:sock_file manage_file_perms;
allow $1_t $1_tmpfs_t:fifo_file manage_file_perms;
fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file })
optional_policy(`xserver',`
xserver_user_client_template($2,$1_t,$1_tmpfs_t)
')