Dan Walsh 3eaa99
###############################################################################
Dan Walsh 3eaa99
#
Dan Walsh 3eaa99
# Copyright (C) 2006 Red Hat, Inc. All Rights Reserved.
Dan Walsh 3eaa99
# Written by David Howells (dhowells@redhat.com)
Dan Walsh 3eaa99
#            Karl MacMillan (kmacmill@redhat.com)
Dan Walsh 3eaa99
#
Dan Walsh 3eaa99
# This program is free software; you can redistribute it and/or
Dan Walsh 3eaa99
# modify it under the terms of the GNU General Public License
Dan Walsh 3eaa99
# as published by the Free Software Foundation; either version
Dan Walsh 3eaa99
# 2 of the License, or (at your option) any later version.
Dan Walsh 3eaa99
#
Dan Walsh 3eaa99
###############################################################################
Dan Walsh 3eaa99
Dan Walsh 3eaa99
#
Dan Walsh 3eaa99
# Define the policy interface for the CacheFiles userspace management daemon.
Dan Walsh 3eaa99
#
Dan Walsh 3eaa99
Dan Walsh 3eaa99
## <summary>policy for cachefilesd</summary>
Dan Walsh 3eaa99
Dan Walsh 3eaa99
########################################
Dan Walsh 3eaa99
## <summary>
Dan Walsh 3eaa99
##	Execute a domain transition to run cachefilesd.
Dan Walsh 3eaa99
## </summary>
Dan Walsh 3eaa99
## <param name="domain">
Dan Walsh 3eaa99
## <summary>
Dan Walsh 3eaa99
##	Domain allowed to transition.
Dan Walsh 3eaa99
## </summary>
Dan Walsh 3eaa99
## </param>
Dan Walsh 3eaa99
#
Dan Walsh 3eaa99
interface(`cachefilesd_domtrans',`
Dan Walsh 3eaa99
	gen_require(`
Dan Walsh 3eaa99
		type cachefilesd_t, cachefilesd_exec_t;
Dan Walsh 3eaa99
	')
Dan Walsh 3eaa99
Dan Walsh 3eaa99
	domain_auto_trans($1,cachefilesd_exec_t,cachefilesd_t)
Dan Walsh 3eaa99
Dan Walsh 3eaa99
	allow $1 cachefilesd_t:fd use;
Dan Walsh 3eaa99
	allow cachefilesd_t $1:fd use;
Dan Walsh 3eaa99
	allow cachefilesd_t $1:fifo_file rw_file_perms;
Dan Walsh 3eaa99
	allow cachefilesd_t $1:process sigchld;
Dan Walsh 3eaa99
')