8f0b7460ea
Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Syntax error. Squash me with 959aa527a5394d23b994ecf75347d2445106d0c4 Replace type and attributes statements by comma delimiters where possible. Syntax error. Squach me with 779a708452142d6e4ac2ba2a158f724782a03291 Replace type and attributes statements by comma delimiters where possible. Syntax error. Squash me with 89180ea115794aadddaa9b356ab1dfcdc9ff102
96 lines
1.9 KiB
Plaintext
96 lines
1.9 KiB
Plaintext
## <summary>Linux infared remote control daemon</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run lircd.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`lircd_domtrans',`
|
|
gen_require(`
|
|
type lircd_t, lircd_exec_t;
|
|
')
|
|
|
|
domain_auto_trans($1, lircd_exec_t, lircd_t)
|
|
')
|
|
|
|
######################################
|
|
## <summary>
|
|
## Connect to lircd over a unix domain
|
|
## stream socket.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`lircd_stream_connect',`
|
|
gen_require(`
|
|
type lircd_var_run_t, lircd_t;
|
|
')
|
|
|
|
files_search_pids($1)
|
|
stream_connect_pattern($1, lircd_var_run_t, lircd_var_run_t, lircd_t)
|
|
')
|
|
|
|
#######################################
|
|
## <summary>
|
|
## Read lircd etc file
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`lircd_read_config',`
|
|
gen_require(`
|
|
type lircd_etc_t;
|
|
')
|
|
|
|
read_files_pattern($1, lircd_etc_t, lircd_etc_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to administrate
|
|
## a lircd environment
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## The role to be allowed to manage the syslog domain.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`lircd_admin',`
|
|
gen_require(`
|
|
type lircd_t, lircd_var_run_t, lircd_etc_t;
|
|
type lircd_initrc_exec_t;
|
|
')
|
|
|
|
allow $1 lircd_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, lircd_t)
|
|
|
|
init_labeled_script_domtrans($1, lircd_initrc_exec_t)
|
|
domain_system_change_exemption($1)
|
|
role_transition $2 lircd_initrc_exec_t system_r;
|
|
allow $2 system_r;
|
|
|
|
files_search_etc($1)
|
|
admin_pattern($1, lircd_etc_t)
|
|
|
|
files_search_pids($1)
|
|
admin_pattern($1, lircd_var_run_t)
|
|
')
|