## <summary>Prelink ELF shared library mappings.</summary> ######################################## ## <summary> ## Execute the prelink program in the prelink domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`prelink_domtrans',` gen_require(` type prelink_t, prelink_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, prelink_exec_t, prelink_t) ') ######################################## ## <summary> ## Execute the prelink program in the prelink domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <param name="role"> ## <summary> ## The role to allow the prelink domain. ## </summary> ## </param> ## <param name="terminal"> ## <summary> ## The type of the terminal allow the prelink domain to use. ## </summary> ## </param> ## <rolecap/> # interface(`prelink_run',` gen_require(` type prelink_t; ') prelink_domtrans($1) role $2 types prelink_t; allow prelink_t $3:chr_file rw_term_perms; ') ######################################## ## <summary> ## Make the specified file type prelinkable. ## </summary> ## <param name="file_type"> ## <summary> ## File type to be prelinked. ## </summary> ## </param> # # cjp: added for misc non-entrypoint objects interface(`prelink_object_file',` gen_require(` attribute prelink_object; ') typeattribute $1 prelink_object; ') ######################################## ## <summary> ## Read the prelink cache. ## </summary> ## <param name="file_type"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`prelink_read_cache',` gen_require(` type prelink_cache_t; ') files_search_etc($1) allow $1 prelink_cache_t:file { getattr read }; ') ######################################## ## <summary> ## Delete the prelink cache. ## </summary> ## <param name="file_type"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`prelink_delete_cache',` gen_require(` type prelink_cache_t; ') allow $1 prelink_cache_t:file unlink; files_rw_etc_dirs($1) ') ######################################## ## <summary> ## Create, read, write, and delete ## prelink log files. ## </summary> ## <param name="file_type"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`prelink_manage_log',` gen_require(` type prelink_log_t; ') logging_search_logs($1) manage_files_pattern($1,prelink_log_t,prelink_log_t) ')