rpms/selinux-policy
5
0
Fork 0
Code Issues Pull Requests Releases Activity

trunk: fix example.if xml problems

Browse Source
This commit is contained in:
Chris PeBenito 2007-08-29 18:14:27 +00:00
parent 6dd721a686
commit 85bec1a669
1 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
doc/example.if
View File

@ -1,8 +1,8 @@
## <summary>Myapp example policy</summary> ## <summary>Myapp example policy</summary>
## <desc> ## <desc>
## <p> ## <p>
## More descriptive text about myapp. The <desc> ## More descriptive text about myapp. The desc
## tag can also use <p>, <ul>, and <ol> ## tag can also use p, ul, and ol
## html tags for formatting. ## html tags for formatting.
## </p> ## </p>
## <p> ## <p>
@ -21,7 +21,9 @@
## Execute a domain transition to run myapp. ## Execute a domain transition to run myapp.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary>
## Domain allowed to transition. ## Domain allowed to transition.
## </summary>
## </param> ## </param>
# #
interface(`myapp_domtrans',` interface(`myapp_domtrans',`
@ -29,12 +31,7 @@ interface(`myapp_domtrans',`
type myapp_t, myapp_exec_t; type myapp_t, myapp_exec_t;
') ')
domain_auto_trans($1,myapp_exec_t,myapp_t) domtrans_pattern($1,myapp_exec_t,myapp_t)
allow $1 myapp_t:fd use;
allow myapp_t $1:fd use;
allow $1 myapp_t:fifo_file rw_file_perms;
allow $1 myapp_t:process sigchld;
') ')
######################################## ########################################
@ -42,7 +39,9 @@ interface(`myapp_domtrans',`
## Read myapp log files. ## Read myapp log files.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary>
## Domain allowed to read the log files. ## Domain allowed to read the log files.
## </summary>
## </param> ## </param>
# #
interface(`myapp_read_log',` interface(`myapp_read_log',`
@ -51,5 +50,5 @@ interface(`myapp_read_log',`
') ')
logging_search_logs($1) logging_search_logs($1)
allow $1 myapp_log_t:file r_file_perms; allow $1 myapp_log_t:file read_file_perms;
') ')