2528a2d701
Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible.
57 lines
1.3 KiB
Plaintext
57 lines
1.3 KiB
Plaintext
## <summary>sound server for network audio server programs, nasd, yiff, etc</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Connect to the sound server over a TCP socket (Deprecated)
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`soundserver_tcp_connect',`
|
|
refpolicywarn(`$0($*) has been deprecated.')
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to administrate
|
|
## an soundd environment
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## The role to be allowed to manage the soundd domain.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`soundserver_admin',`
|
|
gen_require(`
|
|
type soundd_t, soundd_etc_t, soundd_initrc_exec_t;
|
|
type soundd_tmp_t, soundd_var_run_t;
|
|
')
|
|
|
|
allow $1 soundd_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, soundd_t)
|
|
|
|
init_labeled_script_domtrans($1, soundd_initrc_exec_t)
|
|
domain_system_change_exemption($1)
|
|
role_transition $2 soundd_initrc_exec_t system_r;
|
|
allow $2 system_r;
|
|
|
|
files_list_etc($1)
|
|
admin_pattern($1, soundd_etc_t)
|
|
|
|
files_list_tmp($1)
|
|
admin_pattern($1, soundd_tmp_t)
|
|
|
|
files_list_pids($1)
|
|
admin_pattern($1, soundd_var_run_t)
|
|
')
|