Blame refpolicy/policy/modules/services/slrnpull.if
|
Chris PeBenito |
1d427a |
## <summary>Service for downloading news feeds the slrn newsreader.</summary>
|
|
Chris PeBenito |
1d427a |
|
|
Chris PeBenito |
1d427a |
########################################
|
|
Chris PeBenito |
1d427a |
## <summary>
|
|
Chris PeBenito |
1d427a |
## Allow the domain to search slrnpull spools.
|
|
Chris PeBenito |
1d427a |
## </summary>
|
|
Chris PeBenito |
1d427a |
## <param name="pty_type">
|
|
Chris PeBenito |
885b83 |
## <summary>
|
|
Chris PeBenito |
1d427a |
## domain allowed access
|
|
Chris PeBenito |
885b83 |
## </summary>
|
|
Chris PeBenito |
1d427a |
## </param>
|
|
Chris PeBenito |
1d427a |
#
|
|
Chris PeBenito |
1d427a |
interface(`slrnpull_search_spool',`
|
|
Chris PeBenito |
1d427a |
gen_require(`
|
|
Chris PeBenito |
1d427a |
type slrnpull_spool_t;
|
|
Chris PeBenito |
1d427a |
')
|
|
Chris PeBenito |
1d427a |
|
|
Chris PeBenito |
1d427a |
files_search_spool($1)
|
|
Chris PeBenito |
1d427a |
allow $1 slrnpull_spool_t:dir search_dir_perms;
|
|
Chris PeBenito |
1d427a |
')
|
|
Chris PeBenito |
1d427a |
|
|
Chris PeBenito |
1d427a |
########################################
|
|
Chris PeBenito |
1d427a |
## <summary>
|
|
Chris PeBenito |
1d427a |
## Allow the domain to create, read,
|
|
Chris PeBenito |
1d427a |
## write, and delete slrnpull spools.
|
|
Chris PeBenito |
1d427a |
## </summary>
|
|
Chris PeBenito |
1d427a |
## <param name="pty_type">
|
|
Chris PeBenito |
885b83 |
## <summary>
|
|
Chris PeBenito |
1d427a |
## domain allowed access
|
|
Chris PeBenito |
885b83 |
## </summary>
|
|
Chris PeBenito |
1d427a |
## </param>
|
|
Chris PeBenito |
1d427a |
#
|
|
Chris PeBenito |
1d427a |
interface(`slrnpull_manage_spool',`
|
|
Chris PeBenito |
1d427a |
gen_require(`
|
|
Chris PeBenito |
1d427a |
type slrnpull_spool_t;
|
|
Chris PeBenito |
1d427a |
')
|
|
Chris PeBenito |
1d427a |
|
|
Chris PeBenito |
1d427a |
files_search_spool($1)
|
|
Chris PeBenito |
1d427a |
allow $1 slrnpull_spool_t:dir create_dir_perms;
|
|
Chris PeBenito |
1d427a |
allow $1 slrnpull_spool_t:file create_file_perms;
|
|
Chris PeBenito |
1d427a |
allow $1 slrnpull_spool_t:lnk_file create_lnk_perms;
|
|
Chris PeBenito |
1d427a |
')
|