Chris PeBenito 5540e7
## <summary>Restricted (scp/sftp) only shell</summary>
Chris PeBenito 5540e7
Chris PeBenito 296273
########################################
Chris PeBenito 5540e7
## <summary>
Chris PeBenito 296273
##	Role access for rssh
Chris PeBenito 5540e7
## </summary>
Chris PeBenito 296273
## <param name="role">
Chris PeBenito 296273
##	<summary>
Chris PeBenito 296273
##	Role allowed access
Chris PeBenito 296273
##	</summary>
Chris PeBenito 296273
## </param>
Chris PeBenito 296273
## <param name="domain">
Chris PeBenito 5540e7
##	<summary>
Chris PeBenito 296273
##	User domain for the role
Chris PeBenito 5540e7
##	</summary>
Chris PeBenito 5540e7
## </param>
Chris PeBenito 5540e7
#
Chris PeBenito 296273
interface(`rssh_role',`
Chris PeBenito b34db7
	gen_require(`
Chris PeBenito 296273
		type rssh_t;
Chris PeBenito b34db7
	')
Chris PeBenito 5540e7
Chris PeBenito 296273
	role $1 types rssh_t;
Chris PeBenito 5540e7
Chris PeBenito 296273
	# allow ps to show irc
Chris PeBenito 296273
	ps_process_pattern($2, rssh_t)
Chris PeBenito 296273
	allow $2 rssh_t:process signal;
Chris PeBenito 5540e7
')
Chris PeBenito 5540e7
Chris PeBenito 5540e7
########################################
Chris PeBenito 5540e7
## <summary>
Chris PeBenito 5540e7
##	Transition to all user rssh domains.
Chris PeBenito 5540e7
## </summary>
Chris PeBenito 5540e7
## <param name="domain">
Chris PeBenito 5540e7
##	<summary>
Dominick Grift 03b866
##	Domain allowed to transition.
Chris PeBenito 5540e7
##	</summary>
Chris PeBenito 5540e7
## </param>
Chris PeBenito 5540e7
#
Chris PeBenito 296273
interface(`rssh_spec_domtrans',`
Chris PeBenito 5540e7
	gen_require(`
Chris PeBenito 296273
		type rssh_t, rssh_exec_t;
Chris PeBenito 5540e7
	')
Chris PeBenito 5540e7
Chris PeBenito 296273
	spec_domtrans_pattern($1, rssh_exec_t, rssh_t)
Chris PeBenito 5540e7
')
Chris PeBenito 5540e7
Chris PeBenito 5540e7
########################################
Chris PeBenito 5540e7
## <summary>
Chris PeBenito 5540e7
##	Read all users rssh read-only content.
Chris PeBenito 5540e7
## </summary>
Chris PeBenito 5540e7
## <param name="domain">
Chris PeBenito 5540e7
##	<summary>
Chris PeBenito 5540e7
##	Domain allowed access.
Chris PeBenito 5540e7
##	</summary>
Chris PeBenito 5540e7
## </param>
Chris PeBenito 5540e7
#
Chris PeBenito 296273
interface(`rssh_read_ro_content',`
Chris PeBenito 5540e7
	gen_require(`
Chris PeBenito 296273
		type rssh_ro_t;
Chris PeBenito 5540e7
	')
Chris PeBenito 5540e7
Chris PeBenito 296273
	allow $1 rssh_ro_t:dir list_dir_perms;
Chris PeBenito 296273
	read_files_pattern($1, rssh_ro_t, rssh_ro_t)
Chris PeBenito 296273
	read_lnk_files_pattern($1, rssh_ro_t, rssh_ro_t)
Chris PeBenito 5540e7
')