Chris PeBenito 3865d6
## <summary>Policy for local logins.</summary>
Chris PeBenito 07efe9
Chris PeBenito 3865d6
########################################
Chris PeBenito fd89e1
## <summary>
Chris PeBenito fd89e1
##	Execute local logins in the local login domain.
Chris PeBenito fd89e1
## </summary>
Chris PeBenito fd89e1
## <param name="domain">
Chris PeBenito fd89e1
##	The type of the process performing this action.
Chris PeBenito fd89e1
## </param>
Chris PeBenito 07efe9
#
Chris PeBenito 199895
interface(`locallogin_domtrans',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type local_login_t;
Chris PeBenito 139520
	')
Chris PeBenito 0c73cd
Chris PeBenito c9428d
	auth_domtrans_login_program($1,local_login_t)
Chris PeBenito 07efe9
')
Chris PeBenito 07efe9
Chris PeBenito 3ce6cb
########################################
Chris PeBenito fd89e1
## <summary>
Chris PeBenito fd89e1
##	Allow processes to inherit local login file descriptors
Chris PeBenito fd89e1
## </summary>
Chris PeBenito fd89e1
## <param name="domain">
Chris PeBenito fd89e1
##	The type of the process performing this action.
Chris PeBenito fd89e1
## </param>
Chris PeBenito 3865d6
#
Chris PeBenito 199895
interface(`locallogin_use_fd',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type local_login_t;
Chris PeBenito 139520
		class fd use;
Chris PeBenito 139520
	')
Chris PeBenito 0c73cd
Chris PeBenito 0c73cd
	allow $1 local_login_t:fd use;
Chris PeBenito 3ce6cb
')
Chris PeBenito 3ce6cb
Chris PeBenito fd89e1
########################################
Chris PeBenito fd89e1
## <summary>
Chris PeBenito fd89e1
##	Send a null signal to local login processes.
Chris PeBenito fd89e1
## </summary>
Chris PeBenito fd89e1
## <param name="domain">
Chris PeBenito fd89e1
##	Domain allowed access.
Chris PeBenito fd89e1
## </param>
Chris PeBenito fd89e1
#
Chris PeBenito fd89e1
interface(`locallogin_signull',`
Chris PeBenito fd89e1
	gen_require(`
Chris PeBenito fd89e1
		type local_login_t;
Chris PeBenito fd89e1
		class process signull;
Chris PeBenito fd89e1
	')
Chris PeBenito fd89e1
Chris PeBenito fd89e1
	allow $1 local_login_t:process signull;
Chris PeBenito fd89e1
')