Chris PeBenito 17de1b
## <summary>SELinux MLS/MCS label translation service.</summary>
Chris PeBenito 17de1b
Chris PeBenito 0a119a
########################################
Chris PeBenito 0a119a
## <summary>
Chris PeBenito 0a119a
##	Execute setrans server in the setrans domain.
Chris PeBenito 0a119a
## </summary>
Chris PeBenito 0a119a
## <param name="domain">
Chris PeBenito 0a119a
##	<summary>
Dominick Grift a0546c
##	Domain allowed to transition.
Chris PeBenito 0a119a
##	</summary>
Chris PeBenito 0a119a
## </param>
Chris PeBenito 0a119a
#
Chris PeBenito 0a119a
#
Chris PeBenito 0a119a
interface(`setrans_initrc_domtrans',`
Chris PeBenito 0a119a
	gen_require(`
Chris PeBenito 0a119a
		type setrans_initrc_exec_t;
Chris PeBenito 0a119a
	')
Chris PeBenito 0a119a
Chris PeBenito 0a119a
	init_labeled_script_domtrans($1, setrans_initrc_exec_t)
Chris PeBenito 0a119a
')
Chris PeBenito 0a119a
Chris PeBenito 17de1b
#######################################
Chris PeBenito 17de1b
## <summary>
Chris PeBenito 17de1b
##	Allow a domain to translate contexts.
Chris PeBenito 17de1b
## </summary>
Chris PeBenito 17de1b
## <param name="domain">
Chris PeBenito 17de1b
##	<summary>
Chris PeBenito 17de1b
##	Domain allowed access.
Chris PeBenito 17de1b
##	</summary>
Chris PeBenito 17de1b
## </param>
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
interface(`setrans_translate_context',`
Chris PeBenito 17de1b
	gen_require(`
Chris PeBenito 17de1b
		type setrans_t, setrans_var_run_t;
Chris PeBenito b1a903
		class context translate;
Chris PeBenito 17de1b
	')
Chris PeBenito 17de1b
Chris PeBenito 17de1b
	allow $1 self:unix_stream_socket create_stream_socket_perms;
Chris PeBenito a8671a
	allow $1 setrans_t:context translate;
Chris PeBenito 3f67f7
	stream_connect_pattern($1, setrans_var_run_t, setrans_var_run_t, setrans_t)
Chris PeBenito 17de1b
	files_list_pids($1)
Chris PeBenito 17de1b
')