## <summary>Line printer daemon</summary>

#######################################

## <summary>

##	The per user domain template for the lpd module.

## </summary>

## <desc>

##	

##	This template creates a derived domains which are used

##	for lpr printing client.

##	

##	

##	This template is invoked automatically for each user, and

##	generally does not need to be invoked directly

##	by policy writers.

##	

## </desc>

## <param name="userdomain_prefix">

##	<summary>

##	The prefix of the user domain (e.g., user

##	is the prefix for user_t).

##	</summary>

## </param>

## <param name="user_domain">

##	<summary>

##	The type of the user domain.

##	</summary>

## </param>

## <param name="user_role">

##	<summary>

##	The role associated with the user domain.

##	</summary>

## </param>

#

template(`lpd_per_userdomain_template',`

	gen_require(`

		type lpr_exec_t, lpd_t, print_spool_t, printconf_t, lpd_var_run_t, printer_t;

	')

	##############################

	#

	# Declarations

	#

	# Derived domain based on the calling user domain and the program

	type $1_lpr_t;

	domain_type($1_lpr_t)

	domain_entry_file($1_lpr_t,lpr_exec_t)

	role $3 types $1_lpr_t;

	type $1_lpr_tmp_t;

	files_tmp_file($1_lpr_tmp_t)

	# Type for spool files.

	type $1_print_spool_t;

	files_type($1_print_spool_t)

	##############################

	#

	# Local policy

	#

	allow $1_lpr_t self:capability { setuid dac_override net_bind_service chown };

	allow $1_lpr_t self:unix_stream_socket create_stream_socket_perms;

	allow $1_lpr_t self:tcp_socket create_socket_perms;

	allow $1_lpr_t self:udp_socket create_socket_perms;

	# lpr can run in lightweight mode, without a local print spooler.

	allow $1_lpr_t lpd_var_run_t:dir search;

	allow $1_lpr_t lpd_var_run_t:sock_file write;

	files_read_var_files($1_lpr_t)

	# Connect to lpd via a Unix domain socket.

	allow $1_lpr_t printer_t:sock_file rw_file_perms;

	allow $1_lpr_t lpd_t:unix_stream_socket connectto;

	# connecto to a network lpd

	allow $1_lpr_t lpd_t:tcp_socket { connectto recvfrom };

	allow lpd_t $1_lpr_t:tcp_socket { acceptfrom recvfrom };

	# Send SIGHUP to lpd.

	allow $1_lpr_t lpd_t:process signal;

	can_exec($1_lpr_t,lpr_exec_t)

	allow $1_lpr_t $1_lpr_tmp_t:dir create_dir_perms;

	allow $1_lpr_t $1_lpr_tmp_t:file create_file_perms;

	files_tmp_filetrans($1_lpr_t, $1_lpr_tmp_t, { file dir })

	allow $1_lpr_t $1_print_spool_t:file create_file_perms;

	allow $1_lpr_t print_spool_t:dir rw_dir_perms;

	type_transition $1_lpr_t print_spool_t:file $1_print_spool_t;

	# Read and write shared files in the spool directory.

	allow $1_lpr_t print_spool_t:file rw_file_perms;

	allow $1_lpr_t printconf_t:dir r_dir_perms;

	allow $1_lpr_t printconf_t:file r_file_perms;

	allow $1_lpr_t printconf_t:lnk_file { getattr read };

	dontaudit $1_lpr_t $2:unix_stream_socket { read write };

	# Transition from the user domain to the derived domain.

	allow $2 $1_lpr_t:fd use;

	allow $1_lpr_t $2:fd use;

	allow $1_lpr_t $2:fifo_file rw_file_perms;

	allow $1_lpr_t $2:process sigchld;

	domain_auto_trans($2,lpr_exec_t,$1_lpr_t)

	allow $2 $1_lpr_t:process signull;

	# Allow lpd to read, rename, and unlink spool files.

	allow lpd_t $1_print_spool_t:file r_file_perms;

	allow lpd_t $1_print_spool_t:file link_file_perms;

	kernel_tcp_recvfrom($1_lpr_t)

	corenet_tcp_sendrecv_generic_if($1_lpr_t)

	corenet_udp_sendrecv_generic_if($1_lpr_t)

	corenet_raw_sendrecv_generic_if($1_lpr_t)

	corenet_tcp_sendrecv_all_nodes($1_lpr_t)

	corenet_udp_sendrecv_all_nodes($1_lpr_t)

	corenet_raw_sendrecv_all_nodes($1_lpr_t)

	corenet_tcp_sendrecv_all_ports($1_lpr_t)

	corenet_udp_sendrecv_all_ports($1_lpr_t)

	corenet_tcp_bind_all_nodes($1_lpr_t)

	corenet_udp_bind_all_nodes($1_lpr_t)

	corenet_tcp_connect_all_ports($1_lpr_t)

	# for /dev/null

	dev_list_all_dev_nodes($1_lpr_t)

	domain_use_interactive_fds($1_lpr_t)

	files_search_spool($1_lpr_t)

	# for lpd config files (should have a new type)

	files_read_etc_files($1_lpr_t)

	# for test print

	files_read_usr_files($1_lpr_t)

	#Added to cover read_content macro

	files_list_home($1_lpr_t)

	files_read_generic_tmp_files($1_lpr_t)

	fs_getattr_xattr_fs($1_lpr_t)

	# Access the terminal.

	term_use_controlling_term($1_lpr_t)

	term_use_generic_ptys($1_lpr_t)

	libs_use_ld_so($1_lpr_t)

	libs_use_shared_libs($1_lpr_t)

	miscfiles_read_localization($1_lpr_t)

	sysnet_read_config($1_lpr_t)

	userdom_read_user_tmp_symlinks($1,$1_lpr_t)

	# Write to the user domain tty.

	userdom_use_user_terminals($1,$1_lpr_t)

	tunable_policy(`read_default_t',`

		files_list_default($1_lpr_t)

		files_read_default_symlinks($1_lpr_t)

		files_read_default_files($1_lpr_t)

	')

	tunable_policy(`read_untrusted_content',`

		#list and read user specific untrusted content

		files_list_home($1_lpr_t)

		userdom_list_user_home_dirs($1,$1_lpr_t)

		userdom_read_user_untrusted_content_files($1,$1_lpr_t)

		#list and read user specific temporary untrusted content

		files_list_tmp($1_lpr_t)

		userdom_read_user_tmp_untrusted_content_files($1,$1_lpr_t)

	')

	tunable_policy(`use_nfs_home_dirs',`

		files_list_home($1_lpr_t)

		fs_list_auto_mountpoints($1_lpr_t)

		fs_read_nfs_files($1_lpr_t)

		fs_read_nfs_symlinks($1_lpr_t)

	')

	tunable_policy(`use_samba_home_dirs',`

		files_list_home($1_lpr_t)

		fs_list_auto_mountpoints($1_lpr_t)

		fs_read_cifs_files($1_lpr_t)

		fs_read_cifs_symlinks($1_lpr_t)

	')

	optional_policy(`

		cups_read_config($1_lpr_t)

		cups_tcp_connect($1_lpr_t)

		cups_read_config($2)

		cups_tcp_connect($2)

	')

	optional_policy(`

		logging_send_syslog_msg($1_lpr_t)

	')

	optional_policy(`

		nscd_socket_use($1_lpr_t)

	')

	optional_policy(`

		nis_use_ypbind($1_lpr_t)

	')

	ifdef(`TODO',`

	optional_policy(`

		allow $1_lpr_t xdm_t:fd use;

		allow $1_lpr_t xdm_var_run_t:dir search;

		allow $1_lpr_t xdm_t:fifo_file { getattr read write ioctl };

	')

	') dnl end TODO

')

#######################################

## <summary>

##	The administrative functions template for the lpd module.

## </summary>

## <desc>

##	

##	This template creates rules for administrating the ldp service,

##	allowing the specified user to manage lpr files.

##	

## </desc>

## <param name="userdomain_prefix">

##	<summary>

##	The prefix of the user domain (e.g., user

##	is the prefix for user_t).

##	</summary>

## </param>

#

template(`lpr_admin_template',`

	gen_require(`

		type $1_lpr_t;

	')

	userdom_read_all_users_home_content_files($1_lpr_t)

	# Allow per user lpr domain read acces for specific user.

	tunable_policy(`read_untrusted_content',`

		userdom_read_all_untrusted_content($1_lpr_t)

		userdom_read_all_tmp_untrusted_content($1_lpr_t)

	')

')

########################################

## <summary>

##	Execute lpd in the lpd domain.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

#

interface(`lpd_domtrans_checkpc',`

	gen_require(`

		type checkpc_t, checkpc_exec_t;

	')

	domain_auto_trans($1,checkpc_exec_t,checkpc_t)

	allow $1 checkpc_t:fd use;

	allow checkpc_t $1:fd use;

	allow checkpc_t $1:fifo_file rw_file_perms;

	allow checkpc_t $1:process sigchld;

')

########################################

## <summary>

##	Execute amrecover in the lpd domain, and

##	allow the specified role the lpd domain.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

## <param name="role">

##	<summary>

##	The role to be allowed the lpd domain.

##	</summary>

## </param>

## <param name="terminal">

##	<summary>

##	The type of the terminal allow the lpd domain to use.

##	</summary>

## </param>

#

interface(`lpd_run_checkpc',`

	gen_require(`

		type checkpc_t;

	')

	lpd_domtrans_checkpc($1)

	role $2 types checkpc_t;

	allow checkpc_t $3:chr_file rw_term_perms;

')

########################################

## <summary>

##	List the contents of the printer spool directories.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

#

interface(`lpd_list_spool',`

	gen_require(`

		type print_spool_t;

	')

	files_search_spool($1)

	allow $1 print_spool_t:dir list_dir_perms;

')

########################################

## <summary>

##	Create, read, write, and delete printer spool files.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

#

interface(`lpd_manage_spool',`

	gen_require(`

		type print_spool_t;

	')

	files_search_spool($1)

	# cjp: cups wants setattr

	allow $1 print_spool_t:dir { rw_dir_perms setattr };

	allow $1 print_spool_t:file manage_file_perms;

')

########################################

## <summary>

##	List the contents of the printer spool directories.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

#

interface(`lpd_read_config',`

	gen_require(`

		type printconf_t;

	')

	allow $1 printconf_t:dir list_dir_perms;

	allow $1 printconf_t:file r_file_perms;

')

########################################

## <summary>

##      Transition to a user lpr domain.

## </summary>

## <desc>

##      

##      Transition to a user lpr domain.

##      

##      

##      This is a templated interface, and should only

##      be called from a per-userdomain template.

##      

## </desc>

## <param name="userdomain_prefix">

##	<summary>

##      The prefix of the user domain (e.g., user

##      is the prefix for user_t).

##	</summary>

## </param>

## <param name="domain">

##	<summary>

##      Domain allowed access.

##	</summary>

## </param>

#

template(`lpd_domtrans_user_lpr',`

	gen_require(`

		type $1_lpr_t, lpr_exec_t;

	')

	domain_auto_trans($2, lpr_exec_t, $1_lpr_t)

	allow $2 $1_lpr_t:fd use;

	allow $1_lpr_t $2:fd use;

	allow $1_lpr_t $2:fifo_file rw_file_perms;

	allow $1_lpr_t $2:process sigchld;

')