rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add 3rd party interface for transition out of unconfined

Browse Source
This commit is contained in:
Chris PeBenito 2006-07-10 13:31:28 +00:00
parent 3aab4a8398
commit 85311bfffc
1 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
refpolicy/policy/modules/system/unconfined.if
View File

@ -184,6 +184,44 @@ interface(`unconfined_shell_domtrans',`
corecmd_shell_domtrans($1,unconfined_t)
')
########################################
## <summary>
## Allow unconfined to execute the specified program in
## the specified domain.
## </summary>
## <desc>
## <p>
## Allow unconfined to execute the specified program in
## the specified domain.
## </p>
## <p>
## This is a interface to support third party modules
## and its use is not allowed in upstream reference
## policy.
## </p>
## </desc>
## <param name="domain">
## <summary>
## Domain to execute in.
## </summary>
## </param>
## <param name="entry_file">
## <summary>
## Domain entry point file.
## </summary>
## </param>
#
interface(`unconfined_domtrans_to',`
gen_require(`
type unconfined_t;
')
domain_auto_trans(unconfined_t,$2,$1)
allow $1 unconfined_t:fd use;
allow $1 unconfined_t:fifo_file rw_file_perms;
allow $1 unconfined_t:process sigchld;
')
########################################
## <summary>
## Inherit file descriptors from the unconfined domain.