Chris PeBenito 3865d6
## <summary>Miscelaneous files.</summary>
Chris PeBenito e181fe
Chris PeBenito b4cd15
########################################
Chris PeBenito 2ec4c9
## <summary>
Chris PeBenito 2ec4c9
##	Allow process to create files and dirs in /var/cache/man
Chris PeBenito 2ec4c9
##	and /var/catman/
Chris PeBenito 2ec4c9
## </summary>
Chris PeBenito 2ec4c9
## <param name="domain">
Chris PeBenito 2ec4c9
##	Type type of the process performing this action.
Chris PeBenito 2ec4c9
## </param>
Chris PeBenito 24280a
#
Chris PeBenito 199895
interface(`miscfiles_rw_man_cache',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type catman_t;
Chris PeBenito 139520
		class dir create_dir_perms;
Chris PeBenito 139520
		class file create_file_perms;
Chris PeBenito 139520
	')
Chris PeBenito 0c73cd
Chris PeBenito 139520
	files_search_var($1)
Chris PeBenito 0c73cd
	allow $1 catman_t:dir create_dir_perms;
Chris PeBenito 0c73cd
	allow $1 catman_t:file create_file_perms;
Chris PeBenito 24280a
')
Chris PeBenito 24280a
Chris PeBenito 24280a
########################################
Chris PeBenito 2ec4c9
## <summary>
Chris PeBenito 2ec4c9
##	Read fonts
Chris PeBenito 2ec4c9
## </summary>
Chris PeBenito 2ec4c9
## <param name="domain">
Chris PeBenito 2ec4c9
##	Type type of the process performing this action.
Chris PeBenito 2ec4c9
## </param>
Chris PeBenito ec81ec
#
Chris PeBenito 199895
interface(`miscfiles_read_fonts',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type fonts_t;
Chris PeBenito 139520
		class dir r_dir_perms;
Chris PeBenito 139520
		class file r_file_perms;
Chris PeBenito 139520
	')
Chris PeBenito 139520
Chris PeBenito 139520
	files_search_usr($1)
Chris PeBenito 139520
	libs_search_lib($1)
Chris PeBenito 0c73cd
Chris PeBenito 0c73cd
	# cjp: fonts can be in either of the above dirs
Chris PeBenito 80048c
	allow $1 fonts_t:dir r_dir_perms;
Chris PeBenito 80048c
	allow $1 fonts_t:file r_file_perms;
Chris PeBenito ec81ec
')
Chris PeBenito ec81ec
Chris PeBenito ec81ec
########################################
Chris PeBenito 2ec4c9
## <summary>
Chris PeBenito 2ec4c9
##	Allow process to read localization info
Chris PeBenito 2ec4c9
## </summary>
Chris PeBenito 2ec4c9
## <param name="domain">
Chris PeBenito 2ec4c9
##	Type type of the process performing this action.
Chris PeBenito 2ec4c9
## </param>
Chris PeBenito b4cd15
#
Chris PeBenito 199895
interface(`miscfiles_read_localization',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type locale_t;
Chris PeBenito 139520
		class dir r_dir_perms;
Chris PeBenito 139520
		class lnk_file r_file_perms;
Chris PeBenito 139520
		class file r_file_perms;
Chris PeBenito 139520
	')
Chris PeBenito 139520
Chris PeBenito 139520
	files_search_etc($1)
Chris PeBenito 0c73cd
	# FIXME: $1 read etc_t:lnk_file here
Chris PeBenito 139520
	files_search_usr($1)
Chris PeBenito 80048c
	allow $1 locale_t:dir r_dir_perms;
Chris PeBenito 80048c
	allow $1 locale_t:lnk_file r_file_perms;
Chris PeBenito 80048c
	allow $1 locale_t:file r_file_perms;
Chris PeBenito 118186
Chris PeBenito 0c73cd
	# why?
Chris PeBenito c9428d
	libs_read_lib($1)
Chris PeBenito b4cd15
')
Chris PeBenito b4cd15
Chris PeBenito 0fef98
########################################
Chris PeBenito 2ec4c9
## <summary>
Chris PeBenito 2ec4c9
##	Allow process to read legacy time localization info
Chris PeBenito 2ec4c9
## </summary>
Chris PeBenito 2ec4c9
## <param name="domain">
Chris PeBenito 2ec4c9
##	Type type of the process performing this action.
Chris PeBenito 2ec4c9
## </param>
Chris PeBenito 0fef98
#
Chris PeBenito 199895
interface(`miscfiles_legacy_read_localization',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type locale_t;
Chris PeBenito 139520
		class file execute;
Chris PeBenito 139520
	')
Chris PeBenito 0c73cd
Chris PeBenito 0c73cd
	miscfiles_read_localization($1)
Chris PeBenito 0c73cd
	allow $1 locale_t:file execute;
Chris PeBenito 0fef98
')
Chris PeBenito 0fef98
Chris PeBenito 24280a
########################################
Chris PeBenito 2ec4c9
## <summary>
Chris PeBenito 2ec4c9
##	Allow process to read man pages
Chris PeBenito 2ec4c9
## </summary>
Chris PeBenito 2ec4c9
## <param name="domain">
Chris PeBenito 2ec4c9
##	Type type of the process performing this action.
Chris PeBenito 2ec4c9
## </param>
Chris PeBenito 24280a
#
Chris PeBenito 199895
interface(`miscfiles_read_man_pages',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type man_t;
Chris PeBenito 139520
		class dir r_dir_perms;
Chris PeBenito 139520
		class file r_file_perms;
Chris PeBenito 139520
		class lnk_file r_file_perms;
Chris PeBenito 139520
	')
Chris PeBenito 139520
Chris PeBenito 139520
	files_search_usr($1)
Chris PeBenito 80048c
	allow $1 man_t:dir r_dir_perms;
Chris PeBenito 80048c
	allow $1 man_t:file r_file_perms;
Chris PeBenito 80048c
	allow $1 man_t:lnk_file r_file_perms;
Chris PeBenito 24280a
')
Chris PeBenito 24280a
Chris PeBenito 2ec4c9
########################################
Chris PeBenito 2ec4c9
## <summary>
Chris PeBenito 2ec4c9
##	Read TeX data
Chris PeBenito 2ec4c9
## </summary>
Chris PeBenito 2ec4c9
## <param name="domain">
Chris PeBenito 2ec4c9
##	Type type of the process performing this action.
Chris PeBenito 2ec4c9
## </param>
Chris PeBenito 2ec4c9
#
Chris PeBenito 2ec4c9
interface(`miscfiles_read_tetex_data',`
Chris PeBenito 2ec4c9
	gen_require(`
Chris PeBenito 2ec4c9
		type tetex_data_t;
Chris PeBenito 2ec4c9
		class dir r_dir_perms;
Chris PeBenito 2ec4c9
		class file r_file_perms;
Chris PeBenito 2ec4c9
		class lnk_file r_file_perms;
Chris PeBenito 2ec4c9
	')
Chris PeBenito 2ec4c9
Chris PeBenito 2ec4c9
	files_search_var($1)
Chris PeBenito 2ec4c9
	files_search_var_lib($1)
Chris PeBenito 2ec4c9
Chris PeBenito 2ec4c9
	# cjp: TeX data can be in either of the above dirs
Chris PeBenito 2ec4c9
	allow $1 tetex_data_t:dir r_dir_perms;
Chris PeBenito 2ec4c9
	allow $1 tetex_data_t:file r_file_perms;
Chris PeBenito 2ec4c9
	allow $1 tetex_data_t:lnk_file r_file_perms;
Chris PeBenito 2ec4c9
')
Chris PeBenito 2ec4c9
Chris PeBenito 2ec4c9
########################################
Chris PeBenito 2ec4c9
## <summary>
Chris PeBenito 2ec4c9
##	Execute TeX data programs in the caller domain.
Chris PeBenito 2ec4c9
## </summary>
Chris PeBenito 2ec4c9
## <param name="domain">
Chris PeBenito 2ec4c9
##	Type type of the process performing this action.
Chris PeBenito 2ec4c9
## </param>
Chris PeBenito 2ec4c9
#
Chris PeBenito 2ec4c9
interface(`miscfiles_exec_tetex_data',`
Chris PeBenito 2ec4c9
	gen_require(`
Chris PeBenito 2ec4c9
		type fonts_t;
Chris PeBenito 2ec4c9
		class dir r_dir_perms;
Chris PeBenito 2ec4c9
	')
Chris PeBenito 2ec4c9
Chris PeBenito 2ec4c9
	files_search_var($1)
Chris PeBenito 2ec4c9
	files_search_var_lib($1)
Chris PeBenito 2ec4c9
Chris PeBenito 2ec4c9
	# cjp: TeX data can be in either of the above dirs
Chris PeBenito 2ec4c9
	allow $1 tetex_data_t:dir r_dir_perms;
Chris PeBenito 2ec4c9
	can_exec($1,tetex_data_t)
Chris PeBenito 2ec4c9
')