Blame refpolicy/policy/modules/services/resmgr.if
|
Chris PeBenito |
b057be |
## <summary>Resource management daemon</summary>
|
|
Chris PeBenito |
b057be |
|
|
Chris PeBenito |
b057be |
########################################
|
|
Chris PeBenito |
b057be |
## <summary>
|
|
Chris PeBenito |
b057be |
## Connect to resmgrd over a unix domain
|
|
Chris PeBenito |
b057be |
## stream socket.
|
|
Chris PeBenito |
b057be |
## </summary>
|
|
Chris PeBenito |
b057be |
## <param name="domain">
|
|
Chris PeBenito |
b057be |
## <summary>
|
|
Chris PeBenito |
b057be |
## Domain allowed access.
|
|
Chris PeBenito |
b057be |
## </summary>
|
|
Chris PeBenito |
b057be |
## </param>
|
|
Chris PeBenito |
b057be |
#
|
|
Chris PeBenito |
b057be |
interface(`resmgr_stream_connect',`
|
|
Chris PeBenito |
b057be |
gen_require(`
|
|
Chris PeBenito |
b057be |
type resmgrd_var_run_t, resmgrd_t;
|
|
Chris PeBenito |
b057be |
')
|
|
Chris PeBenito |
b057be |
|
|
Chris PeBenito |
b057be |
allow $1 resmgrd_t:unix_stream_socket connectto;
|
|
Chris PeBenito |
b057be |
allow $1 resmgrd_var_run_t:sock_file { getattr write };
|
|
Chris PeBenito |
b057be |
files_search_pids($1)
|
|
Chris PeBenito |
b057be |
')
|