selinux-policy/mls/macros/program/gnome_vfs_macros.te
2005-11-22 19:28:03 +00:00

56 lines
1.3 KiB
Plaintext

#
# GNOME VFS daemon
#
# Author: Ivan Gyurdiev <ivg2@cornell.edu>
#
#######################################
# gnome_vfs_domain(role_prefix)
#
define(`gnome_vfs_domain', `
# Type for daemon
type $1_gnome_vfs_t, domain, nscd_client_domain;
# GNOME, dbus
gnome_application($1_gnome_vfs, $1)
dbusd_client(system, $1_gnome_vfs)
allow $1_gnome_vfs_t system_dbusd_t:dbus send_msg;
ifdef(`hald.te', `
allow $1_gnome_vfs_t hald_t:dbus send_msg;
allow hald_t $1_gnome_vfs_t:dbus send_msg;
')
# Transition from user type
domain_auto_trans($1_t, gnome_vfs_exec_t, $1_gnome_vfs_t)
role $1_r types $1_gnome_vfs_t;
# Stat top level directories on mount_points (check free space?)
allow $1_gnome_vfs_t { fs_type default_t boot_t home_root_t device_t }:dir getattr;
# Search path to /home (??)
allow $1_gnome_vfs_t home_root_t:dir search;
allow $1_gnome_vfs_t $1_home_dir_t:dir search;
# Search path to rpc_pipefs mount point (??)
allow $1_gnome_vfs_t var_lib_nfs_t:dir search;
allow $1_gnome_vfs_t var_lib_t:dir search;
# Search libexec (??)
allow $1_gnome_vfs_t bin_t:dir search;
can_exec($1_gnome_vfs_t, bin_t)
') dnl gnome_vfs_domain
#####################################
# gnome_vfs_client(prefix, role_prefix)
#
define(`gnome_vfs_client', `
# Connect over bonobo
bonobo_connect($1, $2_gnome_vfs)
') dnl gnome_vfs_client