Blame policy/modules/roles/staff.te
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
policy_module(staff, 1.0.0)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
########################################
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
# Declarations
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
role staff_r;
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
userdom_unpriv_user_template(staff)
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
########################################
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
# Local policy
|
|
Chris PeBenito |
e9c6cd |
#
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
optional_policy(`
|
|
Chris PeBenito |
e9c6cd |
auditadm_role_change_template(staff)
|
|
Chris PeBenito |
e9c6cd |
')
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
optional_policy(`
|
|
Chris PeBenito |
e9c6cd |
secadm_role_change_template(staff)
|
|
Chris PeBenito |
e9c6cd |
')
|
|
Chris PeBenito |
e9c6cd |
|
|
Chris PeBenito |
e9c6cd |
optional_policy(`
|
|
Chris PeBenito |
e9c6cd |
sysadm_role_change_template(staff)
|
|
Chris PeBenito |
e9c6cd |
sysadm_dontaudit_use_terms(staff_t)
|
|
Chris PeBenito |
e9c6cd |
')
|
|
Chris PeBenito |
e9c6cd |
|