selinux-policy/policy/modules/roles/staff.te
2010-08-26 12:55:57 -04:00

280 lines
4.4 KiB
Plaintext

policy_module(staff, 2.1.1)
########################################
#
# Declarations
#
role staff_r;
userdom_unpriv_user_template(staff)
fs_exec_noxattr(staff_t)
# needed for sandbox
allow staff_t self:process setexec;
########################################
#
# Local policy
#
kernel_read_ring_buffer(staff_usertype)
kernel_getattr_core_if(staff_usertype)
kernel_getattr_message_if(staff_usertype)
kernel_read_software_raid_state(staff_usertype)
kernel_read_fs_sysctls(staff_usertype)
domain_read_all_domains_state(staff_usertype)
domain_getattr_all_domains(staff_usertype)
domain_obj_id_change_exemption(staff_t)
files_read_kernel_modules(staff_usertype)
seutil_read_module_store(staff_t)
seutil_run_newrole(staff_t, staff_r)
term_use_unallocated_ttys(staff_usertype)
auth_domtrans_pam_console(staff_t)
init_dbus_chat(staff_t)
init_dbus_chat_script(staff_t)
miscfiles_read_hwdata(staff_usertype)
modutils_read_module_config(staff_usertype)
modutils_read_module_deps(staff_usertype)
netutils_run_ping(staff_t, staff_r)
netutils_signal_ping(staff_t)
optional_policy(`
apache_role(staff_r, staff_t)
')
optional_policy(`
mozilla_run_plugin(staff_t, staff_r)
')
optional_policy(`
auditadm_role_change(staff_r)
')
optional_policy(`
dbadm_role_change(staff_r)
')
optional_policy(`
logadm_role_change(staff_r)
')
optional_policy(`
webadm_role_change(staff_r)
')
optional_policy(`
kerneloops_manage_tmp_files(staff_t)
')
optional_policy(`
postgresql_role(staff_r, staff_t)
')
optional_policy(`
secadm_role_change(staff_r)
')
optional_policy(`
unconfined_role_change(staff_r)
')
optional_policy(`
rtkit_scheduled(staff_t)
')
optional_policy(`
screen_role_template(staff, staff_r, staff_t)
')
optional_policy(`
ssh_role_template(staff, staff_r, staff_t)
')
optional_policy(`
sudo_role_template(staff, staff_r, staff_t)
')
optional_policy(`
sysadm_role_change(staff_r)
userdom_dontaudit_use_user_terminals(staff_t)
')
optional_policy(`
telepathy_dbus_session_role(staff_r, staff_t)
')
optional_policy(`
xserver_role(staff_r, staff_t)
')
ifndef(`distro_redhat',`
optional_policy(`
auth_role(staff_r, staff_t)
')
optional_policy(`
bluetooth_role(staff_r, staff_t)
')
optional_policy(`
cdrecord_role(staff_r, staff_t)
')
optional_policy(`
cron_role(staff_r, staff_t)
')
optional_policy(`
dbus_role_template(staff, staff_r, staff_t)
')
optional_policy(`
evolution_role(staff_r, staff_t)
')
optional_policy(`
games_role(staff_r, staff_t)
')
optional_policy(`
gift_role(staff_r, staff_t)
')
optional_policy(`
gnome_role(staff_r, staff_t)
')
optional_policy(`
gpg_role(staff_r, staff_t)
')
optional_policy(`
irc_role(staff_r, staff_t)
')
optional_policy(`
java_role(staff_r, staff_t)
')
optional_policy(`
lockdev_role(staff_r, staff_t)
')
optional_policy(`
lpd_role(staff_r, staff_t)
')
optional_policy(`
mozilla_role(staff_r, staff_t)
')
optional_policy(`
mplayer_role(staff_r, staff_t)
')
optional_policy(`
mta_role(staff_r, staff_t)
')
optional_policy(`
oident_manage_user_content(staff_t)
oident_relabel_user_content(staff_t)
')
optional_policy(`
pyzor_role(staff_r, staff_t)
')
optional_policy(`
razor_role(staff_r, staff_t)
')
optional_policy(`
rssh_role(staff_r, staff_t)
')
optional_policy(`
spamassassin_role(staff_r, staff_t)
')
optional_policy(`
su_role_template(staff, staff_r, staff_t)
')
optional_policy(`
thunderbird_role(staff_r, staff_t)
')
optional_policy(`
tvtime_role(staff_r, staff_t)
')
optional_policy(`
uml_role(staff_r, staff_t)
')
optional_policy(`
userhelper_role_template(staff, staff_r, staff_t)
')
optional_policy(`
vmware_role(staff_r, staff_t)
')
optional_policy(`
wireshark_role(staff_r, staff_t)
')
')
optional_policy(`
accountsd_dbus_chat(staff_t)
accountsd_read_lib_files(staff_t)
')
optional_policy(`
gnomeclock_dbus_chat(staff_t)
')
optional_policy(`
firewallgui_dbus_chat(staff_t)
')
optional_policy(`
lpd_list_spool(staff_t)
')
optional_policy(`
kerneloops_dbus_chat(staff_t)
')
optional_policy(`
rpm_dbus_chat(staff_usertype)
')
optional_policy(`
sandbox_transition(staff_t, staff_r)
')
optional_policy(`
setroubleshoot_stream_connect(staff_t)
setroubleshoot_dbus_chat(staff_t)
setroubleshoot_dbus_chat_fixit(staff_t)
')
optional_policy(`
virt_stream_connect(staff_t)
')
optional_policy(`
userhelper_console_role_template(staff, staff_r, staff_usertype)
')