Blame refpolicy/policy/modules/apps/wine.te
|
Chris PeBenito |
a225f9 |
|
|
Chris PeBenito |
a225f9 |
policy_module(wine,1.0.0)
|
|
Chris PeBenito |
a225f9 |
|
|
Chris PeBenito |
a225f9 |
########################################
|
|
Chris PeBenito |
a225f9 |
#
|
|
Chris PeBenito |
a225f9 |
# Declarations
|
|
Chris PeBenito |
a225f9 |
#
|
|
Chris PeBenito |
a225f9 |
|
|
Chris PeBenito |
a225f9 |
type wine_t;
|
|
Chris PeBenito |
a225f9 |
domain_type(wine_t)
|
|
Chris PeBenito |
a225f9 |
|
|
Chris PeBenito |
a225f9 |
type wine_exec_t;
|
|
Chris PeBenito |
a225f9 |
domain_entry_file(wine_t,wine_exec_t)
|
|
Chris PeBenito |
a225f9 |
|
|
Chris PeBenito |
a225f9 |
########################################
|
|
Chris PeBenito |
a225f9 |
#
|
|
Chris PeBenito |
a225f9 |
# Local policy
|
|
Chris PeBenito |
a225f9 |
#
|
|
Chris PeBenito |
a225f9 |
|
|
Chris PeBenito |
a225f9 |
ifdef(`targeted_policy',`
|
|
Chris PeBenito |
a225f9 |
allow wine_t self:process { execstack execmem };
|
|
Chris PeBenito |
a225f9 |
unconfined_domain_template(wine_t)
|
|
Chris PeBenito |
a225f9 |
role system_r types wine_t;
|
|
Chris PeBenito |
a225f9 |
allow wine_t file_type:file execmod;
|
|
Chris PeBenito |
a225f9 |
')
|