Blame policy/modules/system/netlabel.if
|
Chris PeBenito |
130f8a |
## <summary>NetLabel/CIPSO labeled networking management</summary>
|
|
Chris PeBenito |
130f8a |
|
|
Chris PeBenito |
130f8a |
########################################
|
|
Chris PeBenito |
130f8a |
## <summary>
|
|
Chris PeBenito |
ff8f0a |
## Execute netlabel_mgmt in the netlabel_mgmt domain.
|
|
Chris PeBenito |
130f8a |
## </summary>
|
|
Chris PeBenito |
130f8a |
## <param name="domain">
|
|
Chris PeBenito |
ff8f0a |
## <summary>
|
|
Chris PeBenito |
ff8f0a |
## Domain allowed access.
|
|
Chris PeBenito |
ff8f0a |
## </summary>
|
|
Chris PeBenito |
130f8a |
## </param>
|
|
Chris PeBenito |
130f8a |
#
|
|
Chris PeBenito |
130f8a |
interface(`netlabel_domtrans_mgmt',`
|
|
Chris PeBenito |
6073ea |
gen_require(`
|
|
Chris PeBenito |
6073ea |
type netlabel_mgmt_t, netlabel_mgmt_exec_t;
|
|
Chris PeBenito |
6073ea |
')
|
|
Chris PeBenito |
130f8a |
|
|
Chris PeBenito |
8021cb |
corecmd_search_bin($1)
|
|
Chris PeBenito |
3f67f7 |
domtrans_pattern($1, netlabel_mgmt_exec_t, netlabel_mgmt_t)
|
|
Chris PeBenito |
130f8a |
')
|
|
Chris PeBenito |
130f8a |
|
|
Chris PeBenito |
130f8a |
########################################
|
|
Chris PeBenito |
130f8a |
## <summary>
|
|
Chris PeBenito |
ff8f0a |
## Execute netlabel_mgmt in the netlabel_mgmt domain, and
|
|
Chris PeBenito |
ff8f0a |
## allow the specified role the netlabel_mgmt domain.
|
|
Chris PeBenito |
130f8a |
## </summary>
|
|
Chris PeBenito |
130f8a |
## <param name="domain">
|
|
Chris PeBenito |
ff8f0a |
## <summary>
|
|
Chris PeBenito |
ff8f0a |
## Domain allowed access.
|
|
Chris PeBenito |
ff8f0a |
## </summary>
|
|
Chris PeBenito |
130f8a |
## </param>
|
|
Chris PeBenito |
130f8a |
## <param name="role">
|
|
Chris PeBenito |
130f8a |
## <summary>
|
|
Chris PeBenito |
130f8a |
## The role to be allowed the netlabel_mgmt domain.
|
|
Chris PeBenito |
130f8a |
## </summary>
|
|
Chris PeBenito |
130f8a |
## </param>
|
|
Chris PeBenito |
130f8a |
## <rolecap/>
|
|
Chris PeBenito |
130f8a |
#
|
|
Chris PeBenito |
130f8a |
interface(`netlabel_run_mgmt',`
|
|
Chris PeBenito |
130f8a |
gen_require(`
|
|
Chris PeBenito |
130f8a |
type netlabel_mgmt_t;
|
|
Chris PeBenito |
130f8a |
')
|
|
Chris PeBenito |
130f8a |
|
|
Chris PeBenito |
130f8a |
netlabel_domtrans_mgmt($1)
|
|
Chris PeBenito |
130f8a |
role $2 types netlabel_mgmt_t;
|
|
Chris PeBenito |
130f8a |
')
|