6bb4d401ee
Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible.
69 lines
1.4 KiB
Plaintext
69 lines
1.4 KiB
Plaintext
## <summary>policy for ajaxterm</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run ajaxterm.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`ajaxterm_domtrans',`
|
|
gen_require(`
|
|
type ajaxterm_t, ajaxterm_exec_t;
|
|
')
|
|
|
|
domtrans_pattern($1, ajaxterm_exec_t, ajaxterm_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute ajaxterm server in the ajaxterm domain.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## The type of the process performing this action.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`ajaxterm_initrc_domtrans',`
|
|
gen_require(`
|
|
type ajaxterm_initrc_exec_t;
|
|
')
|
|
|
|
init_labeled_script_domtrans($1, ajaxterm_initrc_exec_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to administrate
|
|
## an ajaxterm environment
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## Role allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`ajaxterm_admin',`
|
|
gen_require(`
|
|
type ajaxterm_t, ajaxterm_initrc_exec_t;
|
|
')
|
|
|
|
allow $1 ajaxterm_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, ajaxterm_t)
|
|
|
|
ajaxterm_initrc_domtrans($1)
|
|
domain_system_change_exemption($1)
|
|
role_transition $2 ajaxterm_initrc_exec_t system_r;
|
|
allow $2 system_r;
|
|
')
|