add x_client_domain implementation
This commit is contained in:
parent
0062f96bb4
commit
0a30b0086b
@ -1197,11 +1197,11 @@ files_filetrans_tmp($1_t, $1_tmp_t, $3)
|
||||
#
|
||||
type $1_tmpfs_t;
|
||||
files_tmpfs_file($1_tmpfs_t)
|
||||
allow $1_t $1_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };
|
||||
allow $1_t $1_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };
|
||||
allow $1_t $1_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };
|
||||
allow $1_t $1_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };
|
||||
allow $1_t $1_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };
|
||||
allow $1_t $1_tmpfs_t:dir rw_dir_perms;
|
||||
allow $1_t $1_tmpfs_t:file manage_file_perms;
|
||||
allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms;
|
||||
allow $1_t $1_tmpfs_t:sock_file manage_file_perms;
|
||||
allow $1_t $1_tmpfs_t:fifo_file manage_file_perms;
|
||||
fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file })
|
||||
|
||||
#
|
||||
@ -1254,3 +1254,18 @@ allow $1 $1_var_run_t:dir create_dir_perms;
|
||||
allow $1 $1_var_run_t:lnk_file create_lnk_perms;
|
||||
# else:
|
||||
allow $1 $1_var_run_t:$2 create_file_perms;
|
||||
|
||||
#
|
||||
# x_client_domain($1,$2): complete
|
||||
#
|
||||
type $1_tmpfs_t;
|
||||
files_tmpfs_file($1_tmpfs_t)
|
||||
allow $1_t $1_tmpfs_t:dir rw_dir_perms;
|
||||
allow $1_t $1_tmpfs_t:file manage_file_perms;
|
||||
allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms;
|
||||
allow $1_t $1_tmpfs_t:sock_file manage_file_perms;
|
||||
allow $1_t $1_tmpfs_t:fifo_file manage_file_perms;
|
||||
fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file })
|
||||
optional_policy(`xserver',`
|
||||
xserver_user_client_template($2,$1_t,$1_tmpfs_t)
|
||||
')
|
||||
|
Loading…
Reference in New Issue
Block a user