Chris PeBenito 052c95
## <summary>File system quota management</summary>
Chris PeBenito 052c95
Chris PeBenito 052c95
########################################
Chris PeBenito 052c95
## <summary>
Chris PeBenito 052c95
##	Execute quota management tools in the quota domain.
Chris PeBenito 052c95
## </summary>
Chris PeBenito 052c95
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 77e4b5
##	Domain allowed to transition.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 052c95
## </param>
Chris PeBenito 052c95
#
Chris PeBenito 052c95
interface(`quota_domtrans',`
Chris PeBenito 052c95
	gen_require(`
Chris PeBenito 052c95
		type quota_t, quota_exec_t;
Chris PeBenito 052c95
	')
Chris PeBenito 052c95
Chris PeBenito 0bfccd
	domtrans_pattern($1, quota_exec_t, quota_t)
Chris PeBenito 052c95
')
Chris PeBenito 052c95
Chris PeBenito 052c95
########################################
Chris PeBenito 052c95
## <summary>
Chris PeBenito 052c95
##	Execute quota management tools in the quota domain, and
Chris PeBenito 052c95
##	allow the specified role the quota domain.
Chris PeBenito 052c95
## </summary>
Chris PeBenito 052c95
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Dominick Grift 77e4b5
##	Domain allowed to transition.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 052c95
## </param>
Chris PeBenito 052c95
## <param name="role">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito a7ee7f
##	Role allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 052c95
## </param>
Chris PeBenito bbcd3c
## <rolecap/>
Chris PeBenito 052c95
#
Chris PeBenito 052c95
interface(`quota_run',`
Chris PeBenito 052c95
	gen_require(`
Chris PeBenito 052c95
		type quota_t;
Chris PeBenito 052c95
	')
Chris PeBenito 052c95
Chris PeBenito 052c95
	quota_domtrans($1)
Chris PeBenito 052c95
	role $2 types quota_t;
Chris PeBenito 052c95
')
Chris PeBenito 052c95
Chris PeBenito 052c95
########################################
Chris PeBenito 052c95
## <summary>
Chris PeBenito 052c95
##	Do not audit attempts to get the attributes
Chris PeBenito 052c95
##	of filesystem quota data files.
Chris PeBenito 052c95
## </summary>
Chris PeBenito 052c95
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 052c95
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 052c95
## </param>
Chris PeBenito 052c95
#
Chris PeBenito 052c95
interface(`quota_dontaudit_getattr_db',`
Chris PeBenito 052c95
	gen_require(`
Chris PeBenito 052c95
		type quota_db_t;
Chris PeBenito 052c95
	')
Chris PeBenito 052c95
Chris PeBenito 052c95
	dontaudit $1 quota_db_t:file getattr;
Chris PeBenito 052c95
')
Chris PeBenito 052c95
Chris PeBenito ac9db9
########################################
Chris PeBenito ac9db9
## <summary>
Chris PeBenito ac9db9
##	Create, read, write, and delete quota
Chris PeBenito ac9db9
##	flag files.
Chris PeBenito ac9db9
## </summary>
Chris PeBenito ac9db9
## <param name="domain">
Chris PeBenito ac9db9
##	<summary>
Dominick Grift 77e4b5
##	Domain allowed access.
Chris PeBenito ac9db9
##	</summary>
Chris PeBenito ac9db9
## </param>
Chris PeBenito ac9db9
#
Chris PeBenito 052c95
interface(`quota_manage_flags',`
Chris PeBenito 052c95
	gen_require(`
Chris PeBenito 052c95
		type quota_flag_t;
Chris PeBenito 052c95
	')
Chris PeBenito 052c95
Chris PeBenito 052c95
	files_search_var_lib($1)
Chris PeBenito 0bfccd
	manage_files_pattern($1, quota_flag_t, quota_flag_t)
Chris PeBenito 052c95
')