selinux-policy/refpolicy/policy/modules/system/locallogin.if

42 lines
995 B
Plaintext

## <module name="locallogin">
## <summary>Policy for local logins.</summary>
########################################
## <interface name="locallogin_domtrans">
## <description>
## Execute local logins in the locallogin domain.
## </description>
## <parameter name="domain">
## The type of the process performing this action.
## </parameter>
## </interface>
#
interface(`locallogin_domtrans',`
gen_require(`
type local_login_t;
')
auth_domtrans_login_program($1,local_login_t)
')
########################################
## <interface name="locallogin_use_fd">
## <description>
## Allow processes to inherit local login file descriptors
## </description>
## <parameter name="domain">
## The type of the process performing this action.
## </parameter>
## </interface>
#
interface(`locallogin_use_fd',`
gen_require(`
type local_login_t;
class fd use;
')
allow $1 local_login_t:fd use;
')
## </module>