From e9199fef2b68ee5bf8f12d4cc5a9450c5a67d63e Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Tue, 11 Oct 2005 14:54:59 +0000 Subject: [PATCH] add anonymous_domain --- docs/macro_conversion_guide | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/docs/macro_conversion_guide b/docs/macro_conversion_guide index dd8fcffe..4e0391d3 100644 --- a/docs/macro_conversion_guide +++ b/docs/macro_conversion_guide @@ -226,6 +226,15 @@ allow $1 devtty_t:chr_file { read write getattr ioctl }; allow $1 devpts_t:dir { read search getattr }; allow $1 $2_devpts_t:chr_file { read write getattr ioctl }; +# +# anonymous_domain(): +# +gen_tunable(allow_$1_anon_write,false) +miscfiles_read_public_files($1_t) +tunable_policy(`allow_$1_anon_write',` +miscfiles_manage_public_files($1_t) +') + # # append_log_domain(): # @@ -977,7 +986,7 @@ allow $1 $2:lnk_file { getattr read }; # # system_crond_entry(): # -optional_policy(`cron.te', ` +optional_policy(`cron.te',` cron_system_entry($2,$1) ')