Chris PeBenito edf241
## <summary>Evolution email client</summary>
Chris PeBenito edf241
Chris PeBenito 296273
########################################
Chris PeBenito edf241
## <summary>
Chris PeBenito 296273
##	Role access for evolution
Chris PeBenito edf241
## </summary>
Chris PeBenito 296273
## <param name="role">
Chris PeBenito edf241
##	<summary>
Chris PeBenito 296273
##	Role allowed access
Chris PeBenito edf241
##	</summary>
Chris PeBenito edf241
## </param>
Chris PeBenito 296273
## <param name="domain">
Chris PeBenito edf241
##	<summary>
Chris PeBenito 296273
##	User domain for the role
Chris PeBenito edf241
##	</summary>
Chris PeBenito edf241
## </param>
Chris PeBenito edf241
#
Chris PeBenito 296273
interface(`evolution_role',`
Chris PeBenito 296273
	gen_require(`
Chris PeBenito 296273
		type evolution_t, evolution_exec_t, evolution_home_t;
Chris PeBenito 296273
		type evolution_alarm_t, evolution_alarm_exec_t;
Chris PeBenito 296273
		type evolution_exchange_t, evolution_exchange_exec_t;
Chris PeBenito 296273
		type evolution_exchange_orbit_tmp_t;
Chris PeBenito 296273
		type evolution_server_t, evolution_server_exec_t;
Chris PeBenito 296273
		type evolution_webcal_t, evolution_webcal_exec_t;
Chris PeBenito 296273
	')
Chris PeBenito 296273
Chris PeBenito 296273
	role $1 types { evolution_t evolution_alarm_t evolution_exchange_t };
Chris PeBenito 296273
	role $1 types { evolution_server_t evolution_webcal_t };
Chris PeBenito 296273
Chris PeBenito 296273
	domtrans_pattern($2, evolution_exec_t, evolution_t)
Chris PeBenito 296273
	domtrans_pattern($2, evolution_alarm_exec_t, evolution_alarm_t)
Chris PeBenito 296273
	domtrans_pattern($2, evolution_exchange_exec_t, evolution_exchange_t)
Chris PeBenito 296273
	domtrans_pattern($2, evolution_server_exec_t, evolution_server_t)
Chris PeBenito 296273
	domtrans_pattern($2, evolution_webcal_exec_t, evolution_webcal_t)
Chris PeBenito 296273
Chris PeBenito 296273
	ps_process_pattern($2, evolution_t)
Chris PeBenito 296273
	ps_process_pattern($2, evolution_alarm_t)
Chris PeBenito 296273
	ps_process_pattern($2, evolution_exchange_t)
Chris PeBenito 296273
	ps_process_pattern($2, evolution_server_t)
Chris PeBenito 296273
	ps_process_pattern($2, evolution_webcal_t)
Chris PeBenito 296273
Chris PeBenito 296273
	allow evolution_t $2:dir search;
Chris PeBenito 296273
	allow evolution_t $2:file read;
Chris PeBenito 296273
	allow evolution_t $2:lnk_file read;
Chris PeBenito 296273
	allow evolution_t $2:unix_stream_socket connectto;
Chris PeBenito 296273
Chris PeBenito 296273
	allow $2 evolution_t:unix_stream_socket connectto;
Chris PeBenito 296273
	allow $2 evolution_t:process noatsecure;
Chris PeBenito 296273
	allow $2 evolution_t:process signal_perms;
Chris PeBenito edf241
Chris PeBenito edf241
	# Access .evolution
Chris PeBenito 296273
	allow $2 evolution_home_t:dir manage_dir_perms;
Chris PeBenito 296273
	allow $2 evolution_home_t:file manage_file_perms;
Chris PeBenito 296273
	allow $2 evolution_home_t:lnk_file manage_lnk_file_perms;
Chris PeBenito 296273
	allow $2 evolution_home_t:{ dir file lnk_file } { relabelfrom relabelto };
Chris PeBenito edf241
Chris PeBenito 296273
	allow evolution_exchange_t $2:unix_stream_socket connectto;
Chris PeBenito edf241
Chris PeBenito edf241
	# Clock applet talks to exchange (FIXME: Needs policy)
Chris PeBenito 296273
	allow $2 evolution_exchange_t:unix_stream_socket connectto;
Chris PeBenito 296273
	allow $2 evolution_exchange_orbit_tmp_t:sock_file write;
Chris PeBenito edf241
')
Chris PeBenito edf241
Chris PeBenito edf241
########################################
Chris PeBenito edf241
## <summary>
Chris PeBenito edf241
##	Create objects in users evolution home folders.
Chris PeBenito edf241
## </summary>
Chris PeBenito edf241
## <param name="domain">
Chris PeBenito edf241
##	<summary>
Chris PeBenito edf241
##	Domain allowed access.
Chris PeBenito edf241
##	</summary>
Chris PeBenito edf241
## </param>
Chris PeBenito 8f3a0a
## <param name="file_type">
Chris PeBenito 8f3a0a
##	<summary>
Chris PeBenito 8f3a0a
##	Private file type.
Chris PeBenito 8f3a0a
##	</summary>
Chris PeBenito 8f3a0a
## </param>
Chris PeBenito 8f3a0a
## <param name="class">
Chris PeBenito edf241
##	<summary>
Chris PeBenito 296273
##	The object class of the object being created.
Chris PeBenito edf241
##	</summary>
Chris PeBenito edf241
## </param>
Chris PeBenito edf241
#
Chris PeBenito 296273
interface(`evolution_home_filetrans',`
Chris PeBenito edf241
	gen_require(`
Chris PeBenito 296273
		type evolution_home_t;
Chris PeBenito edf241
	')
Chris PeBenito edf241
Chris PeBenito 296273
	allow $1 evolution_home_t:dir rw_dir_perms;
Chris PeBenito 296273
	type_transition $1 evolution_home_t:$3 $2;
Chris PeBenito edf241
')
Chris PeBenito edf241
Chris PeBenito edf241
########################################
Chris PeBenito edf241
## <summary>
Chris PeBenito 296273
##	Connect to evolution unix stream socket.
Chris PeBenito edf241
## </summary>
Chris PeBenito edf241
## <param name="domain">
Chris PeBenito edf241
##	<summary>
Chris PeBenito edf241
##	Domain allowed access.
Chris PeBenito edf241
##	</summary>
Chris PeBenito edf241
## </param>
Chris PeBenito edf241
#
Chris PeBenito 296273
interface(`evolution_stream_connect',`
Chris PeBenito edf241
	gen_require(`
Chris PeBenito 296273
		type evolution_t, evolution_home_t;
Chris PeBenito edf241
	')
Chris PeBenito edf241
Chris PeBenito 296273
	allow $1 evolution_t:unix_stream_socket connectto;
Chris PeBenito 296273
	allow $1 evolution_home_t:dir search;
Chris PeBenito edf241
')
Chris PeBenito 6b19be
Chris PeBenito 6b19be
########################################
Chris PeBenito 6b19be
## <summary>
Chris PeBenito 6b19be
##	Send and receive messages from
Chris PeBenito 6b19be
##	evolution over dbus.
Chris PeBenito 6b19be
## </summary>
Chris PeBenito 6b19be
## <param name="domain">
Chris PeBenito 6b19be
##	<summary>
Chris PeBenito 6b19be
##	Domain allowed access.
Chris PeBenito 6b19be
##	</summary>
Chris PeBenito 6b19be
## </param>
Chris PeBenito 6b19be
#
Chris PeBenito 6b19be
interface(`evolution_dbus_chat',`
Chris PeBenito 6b19be
	gen_require(`
Chris PeBenito 296273
		type evolution_t;
Chris PeBenito 6b19be
		class dbus send_msg;
Chris PeBenito 6b19be
	')
Chris PeBenito 6b19be
Chris PeBenito 296273
	allow $1 evolution_t:dbus send_msg;
Chris PeBenito 296273
	allow evolution_t $1:dbus send_msg;
Chris PeBenito 6b19be
')
Chris PeBenito 6b19be
Chris PeBenito 6b19be
########################################
Chris PeBenito 6b19be
## <summary>
Chris PeBenito 6b19be
##	Send and receive messages from
Chris PeBenito 6b19be
##	evolution_alarm over dbus.
Chris PeBenito 6b19be
## </summary>
Chris PeBenito 6b19be
## <param name="domain">
Chris PeBenito 6b19be
##	<summary>
Chris PeBenito 6b19be
##	Domain allowed access.
Chris PeBenito 6b19be
##	</summary>
Chris PeBenito 6b19be
## </param>
Chris PeBenito 6b19be
#
Chris PeBenito 6b19be
interface(`evolution_alarm_dbus_chat',`
Chris PeBenito 6b19be
	gen_require(`
Chris PeBenito 296273
		type evolution_alarm_t;
Chris PeBenito 6b19be
		class dbus send_msg;
Chris PeBenito 6b19be
	')
Chris PeBenito 6b19be
Chris PeBenito 296273
	allow $1 evolution_alarm_t:dbus send_msg;
Chris PeBenito 296273
	allow evolution_alarm_t $1:dbus send_msg;
Chris PeBenito 6b19be
')