Blame refpolicy/policy/modules/services/cvs.if
|
Chris PeBenito |
93070c |
## <summary>Concurrent versions system</summary>
|
|
Chris PeBenito |
93070c |
|
|
Chris PeBenito |
93070c |
########################################
|
|
Chris PeBenito |
93070c |
## <summary>
|
|
Chris PeBenito |
93070c |
## Read the CVS data and metadata.
|
|
Chris PeBenito |
93070c |
## </summary>
|
|
Chris PeBenito |
93070c |
## <param name="domain">
|
|
Chris PeBenito |
885b83 |
## <summary>
|
|
Chris PeBenito |
93070c |
## Domain allowed access.
|
|
Chris PeBenito |
885b83 |
## </summary>
|
|
Chris PeBenito |
93070c |
## </param>
|
|
Chris PeBenito |
93070c |
#
|
|
Chris PeBenito |
93070c |
interface(`cvs_read_data',`
|
|
Chris PeBenito |
93070c |
gen_require(`
|
|
Chris PeBenito |
93070c |
type cvs_data_t;
|
|
Chris PeBenito |
93070c |
')
|
|
Chris PeBenito |
93070c |
|
|
Chris PeBenito |
93070c |
allow $1 cvs_data_t:file { getattr read };
|
|
Chris PeBenito |
93070c |
')
|
|
Chris PeBenito |
165b42 |
|
|
Chris PeBenito |
165b42 |
########################################
|
|
Chris PeBenito |
165b42 |
## <summary>
|
|
Chris PeBenito |
165b42 |
## Allow the specified domain to execute cvs
|
|
Chris PeBenito |
165b42 |
## in the caller domain.
|
|
Chris PeBenito |
165b42 |
## </summary>
|
|
Chris PeBenito |
165b42 |
## <param name="domain">
|
|
Chris PeBenito |
165b42 |
## <summary>
|
|
Chris PeBenito |
165b42 |
## Domain allowed access.
|
|
Chris PeBenito |
165b42 |
## </summary>
|
|
Chris PeBenito |
165b42 |
## </param>
|
|
Chris PeBenito |
165b42 |
#
|
|
Chris PeBenito |
165b42 |
interface(`cvs_exec',`
|
|
Chris PeBenito |
165b42 |
gen_require(`
|
|
Chris PeBenito |
165b42 |
type cvs_exec_t;
|
|
Chris PeBenito |
165b42 |
')
|
|
Chris PeBenito |
165b42 |
|
|
Chris PeBenito |
165b42 |
can_exec($1,cvs_exec_t)
|
|
Chris PeBenito |
165b42 |
')
|
|
Chris PeBenito |
165b42 |
|