Blame refpolicy/policy/modules/system/locallogin.if
|
Chris PeBenito |
3865d6 |
## <module name="locallogin" layer="system">
|
|
Chris PeBenito |
3865d6 |
## <summary>Policy for local logins.</summary>
|
|
Chris PeBenito |
07efe9 |
|
|
Chris PeBenito |
3865d6 |
########################################
|
|
Chris PeBenito |
c9428d |
## <interface name="locallogin_domtrans">
|
|
Chris PeBenito |
3865d6 |
## <description>
|
|
Chris PeBenito |
3865d6 |
## Execute local logins in the locallogin domain.
|
|
Chris PeBenito |
3865d6 |
## </description>
|
|
Chris PeBenito |
3865d6 |
## <parameter name="domain">
|
|
Chris PeBenito |
3865d6 |
## The type of the process performing this action.
|
|
Chris PeBenito |
3865d6 |
## </parameter>
|
|
Chris PeBenito |
3865d6 |
## </interface>
|
|
Chris PeBenito |
07efe9 |
#
|
|
Chris PeBenito |
c9428d |
define(`locallogin_domtrans',`
|
|
Chris PeBenito |
139520 |
gen_require(`
|
|
Chris PeBenito |
139520 |
type local_login_t;
|
|
Chris PeBenito |
139520 |
')
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
c9428d |
auth_domtrans_login_program($1,local_login_t)
|
|
Chris PeBenito |
07efe9 |
')
|
|
Chris PeBenito |
07efe9 |
|
|
Chris PeBenito |
3ce6cb |
########################################
|
|
Chris PeBenito |
c9428d |
## <interface name="locallogin_use_fd">
|
|
Chris PeBenito |
3865d6 |
## <description>
|
|
Chris PeBenito |
3865d6 |
## Allow processes to inherit local login file descriptors
|
|
Chris PeBenito |
3865d6 |
## </description>
|
|
Chris PeBenito |
3865d6 |
## <parameter name="domain">
|
|
Chris PeBenito |
3865d6 |
## The type of the process performing this action.
|
|
Chris PeBenito |
3865d6 |
## </parameter>
|
|
Chris PeBenito |
3865d6 |
## </interface>
|
|
Chris PeBenito |
3865d6 |
#
|
|
Chris PeBenito |
c9428d |
define(`locallogin_use_fd',`
|
|
Chris PeBenito |
139520 |
gen_require(`
|
|
Chris PeBenito |
139520 |
type local_login_t;
|
|
Chris PeBenito |
139520 |
class fd use;
|
|
Chris PeBenito |
139520 |
')
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
allow $1 local_login_t:fd use;
|
|
Chris PeBenito |
3ce6cb |
')
|
|
Chris PeBenito |
3ce6cb |
|
|
Chris PeBenito |
3865d6 |
## </module>
|