Blame policy/modules/apps/games.if
|
Chris PeBenito |
fbc0a2 |
## <summary>Games</summary>
|
|
Chris PeBenito |
fbc0a2 |
|
|
Chris PeBenito |
296273 |
############################################################
|
|
Chris PeBenito |
fbc0a2 |
## <summary>
|
|
Chris PeBenito |
296273 |
## Role access for games
|
|
Chris PeBenito |
fbc0a2 |
## </summary>
|
|
Chris PeBenito |
296273 |
## <param name="role">
|
|
Chris PeBenito |
fbc0a2 |
## <summary>
|
|
Chris PeBenito |
296273 |
## Role allowed access
|
|
Chris PeBenito |
fbc0a2 |
## </summary>
|
|
Chris PeBenito |
fbc0a2 |
## </param>
|
|
Chris PeBenito |
296273 |
## <param name="domain">
|
|
Chris PeBenito |
fbc0a2 |
## <summary>
|
|
Chris PeBenito |
296273 |
## User domain for the role
|
|
Chris PeBenito |
fbc0a2 |
## </summary>
|
|
Chris PeBenito |
fbc0a2 |
## </param>
|
|
Chris PeBenito |
fbc0a2 |
#
|
|
Chris PeBenito |
296273 |
interface(`games_role',`
|
|
Chris PeBenito |
6b19be |
gen_require(`
|
|
Chris PeBenito |
296273 |
type games_t, games_exec_t;
|
|
Chris PeBenito |
fbc0a2 |
')
|
|
Chris PeBenito |
fbc0a2 |
|
|
Chris PeBenito |
296273 |
role $1 types games_t;
|
|
Chris PeBenito |
fbc0a2 |
|
|
Chris PeBenito |
296273 |
domtrans_pattern($2, games_exec_t, games_t)
|
|
Chris PeBenito |
296273 |
allow $2 games_t:unix_stream_socket connectto;
|
|
Chris PeBenito |
296273 |
allow games_t $2:unix_stream_socket connectto;
|
|
Chris PeBenito |
fbc0a2 |
|
|
Chris PeBenito |
296273 |
# Allow the user domain to signal/ps.
|
|
Chris PeBenito |
296273 |
ps_process_pattern($2, games_t)
|
|
Chris PeBenito |
296273 |
allow $2 games_t:process signal_perms;
|
|
Chris PeBenito |
fbc0a2 |
')
|
|
Chris PeBenito |
c90440 |
|
|
Chris PeBenito |
c90440 |
########################################
|
|
Chris PeBenito |
c90440 |
## <summary>
|
|
Chris PeBenito |
c90440 |
## Allow the specified domain to read/write
|
|
Chris PeBenito |
c90440 |
## games data.
|
|
Chris PeBenito |
c90440 |
## </summary>
|
|
Chris PeBenito |
c90440 |
## <param name="domain">
|
|
Chris PeBenito |
c90440 |
## <summary>
|
|
Chris PeBenito |
c90440 |
## Domain allowed access.
|
|
Chris PeBenito |
c90440 |
## </summary>
|
|
Chris PeBenito |
c90440 |
## </param>
|
|
Chris PeBenito |
c90440 |
#
|
|
Chris PeBenito |
c90440 |
interface(`games_rw_data',`
|
|
Chris PeBenito |
c90440 |
gen_require(`
|
|
Chris PeBenito |
c90440 |
type games_data_t;
|
|
Chris PeBenito |
c90440 |
')
|
|
Chris PeBenito |
c90440 |
|
|
Chris PeBenito |
c90440 |
rw_files_pattern($1, games_data_t, games_data_t)
|
|
Chris PeBenito |
c90440 |
')
|