policy_module(gpg, 1.0)

########################################

#

# Declarations

#

# Allow gpg exec stack

bool allow_gpg_execstack false;

# Type for gpg or pgp executables.

type gpg_exec_t;

type gpg_helper_exec_t;

files_make_file(gpg_exec_t)

files_make_file(gpg_helper_exec_t)

# Type for the gpg-agent executable.

type gpg_agent_exec_t;

files_make_file(gpg_agent_exec_t)

# type for the pinentry executable

type pinentry_exec_t;

files_make_file(pinentry_exec_t)

#allow sysadm_gpg_t { home_root_t user_home_dir_t }:dir search;

#allow sysadm_gpg_t ptyfile:chr_file rw_file_perms;