add x_client_domain implementation

This commit is contained in:
Chris PeBenito 2006-02-15 16:30:48 +00:00
parent 0062f96bb4
commit 0a30b0086b

View File

@ -1197,11 +1197,11 @@ files_filetrans_tmp($1_t, $1_tmp_t, $3)
#
type $1_tmpfs_t;
files_tmpfs_file($1_tmpfs_t)
allow $1_t $1_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };
allow $1_t $1_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };
allow $1_t $1_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };
allow $1_t $1_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };
allow $1_t $1_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };
allow $1_t $1_tmpfs_t:dir rw_dir_perms;
allow $1_t $1_tmpfs_t:file manage_file_perms;
allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms;
allow $1_t $1_tmpfs_t:sock_file manage_file_perms;
allow $1_t $1_tmpfs_t:fifo_file manage_file_perms;
fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file })
#
@ -1254,3 +1254,18 @@ allow $1 $1_var_run_t:dir create_dir_perms;
allow $1 $1_var_run_t:lnk_file create_lnk_perms;
# else:
allow $1 $1_var_run_t:$2 create_file_perms;
#
# x_client_domain($1,$2): complete
#
type $1_tmpfs_t;
files_tmpfs_file($1_tmpfs_t)
allow $1_t $1_tmpfs_t:dir rw_dir_perms;
allow $1_t $1_tmpfs_t:file manage_file_perms;
allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms;
allow $1_t $1_tmpfs_t:sock_file manage_file_perms;
allow $1_t $1_tmpfs_t:fifo_file manage_file_perms;
fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file })
optional_policy(`xserver',`
xserver_user_client_template($2,$1_t,$1_tmpfs_t)
')