Chris PeBenito a225f9
Chris PeBenito a225f9
policy_module(wine,1.0.0)
Chris PeBenito a225f9
Chris PeBenito a225f9
########################################
Chris PeBenito a225f9
#
Chris PeBenito a225f9
# Declarations
Chris PeBenito a225f9
#
Chris PeBenito a225f9
Chris PeBenito a225f9
type wine_t;
Chris PeBenito a225f9
domain_type(wine_t)
Chris PeBenito a225f9
Chris PeBenito a225f9
type wine_exec_t;
Chris PeBenito a225f9
domain_entry_file(wine_t,wine_exec_t)
Chris PeBenito a225f9
Chris PeBenito a225f9
########################################
Chris PeBenito a225f9
#
Chris PeBenito a225f9
# Local policy
Chris PeBenito a225f9
#
Chris PeBenito a225f9
Chris PeBenito a225f9
ifdef(`targeted_policy',`
Chris PeBenito a225f9
	allow wine_t self:process { execstack execmem };
Chris PeBenito a225f9
	unconfined_domain_template(wine_t)
Chris PeBenito a225f9
	role system_r types wine_t;
Chris PeBenito a225f9
	allow wine_t file_type:file execmod;
Chris PeBenito a225f9
')