|
Chris PeBenito |
3865d6 |
## <module name="miscfiles" layer="system">
|
|
Chris PeBenito |
3865d6 |
## <summary>Miscelaneous files.</summary>
|
|
Chris PeBenito |
e181fe |
|
|
Chris PeBenito |
b4cd15 |
########################################
|
|
Chris PeBenito |
c9428d |
## <interface name="miscfiles_rw_man_cache">
|
|
Chris PeBenito |
3865d6 |
## <description>
|
|
Chris PeBenito |
3865d6 |
## Allow process to create files and dirs in /var/cache/man
|
|
Chris PeBenito |
3865d6 |
## and /var/catman/
|
|
Chris PeBenito |
3865d6 |
## </description>
|
|
Chris PeBenito |
3865d6 |
## <securitydesc>
|
|
Chris PeBenito |
3865d6 |
## ...
|
|
Chris PeBenito |
3865d6 |
## </securitydesc>
|
|
Chris PeBenito |
3865d6 |
## <parameter name="domain">
|
|
Chris PeBenito |
3865d6 |
## Type type of the process performing this action.
|
|
Chris PeBenito |
3865d6 |
## </parameter>
|
|
Chris PeBenito |
3865d6 |
## </interface>
|
|
Chris PeBenito |
24280a |
#
|
|
Chris PeBenito |
c9428d |
define(`miscfiles_rw_man_cache',`
|
|
Chris PeBenito |
fa7bea |
gen_require(`$0'_depend)
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
# FIXME: search var_t dir
|
|
Chris PeBenito |
0c73cd |
allow $1 catman_t:dir create_dir_perms;
|
|
Chris PeBenito |
0c73cd |
allow $1 catman_t:file create_file_perms;
|
|
Chris PeBenito |
24280a |
')
|
|
Chris PeBenito |
24280a |
|
|
Chris PeBenito |
c9428d |
define(`miscfiles_rw_man_cache_depend',`
|
|
Chris PeBenito |
0c73cd |
type catman_t;
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
class dir create_dir_perms;
|
|
Chris PeBenito |
0c73cd |
class file create_file_perms;
|
|
Chris PeBenito |
24280a |
')
|
|
Chris PeBenito |
24280a |
|
|
Chris PeBenito |
24280a |
########################################
|
|
Chris PeBenito |
3865d6 |
## <interface name="miscfiles_read_fonts">
|
|
Chris PeBenito |
3865d6 |
## <description>
|
|
Chris PeBenito |
3865d6 |
## Allow process to read fonts files
|
|
Chris PeBenito |
3865d6 |
## </description>
|
|
Chris PeBenito |
3865d6 |
## <securitydesc>
|
|
Chris PeBenito |
3865d6 |
## ...
|
|
Chris PeBenito |
3865d6 |
## </securitydesc>
|
|
Chris PeBenito |
3865d6 |
## <parameter name="domain">
|
|
Chris PeBenito |
3865d6 |
## Type type of the process performing this action.
|
|
Chris PeBenito |
3865d6 |
## </parameter>
|
|
Chris PeBenito |
3865d6 |
## </interface>
|
|
Chris PeBenito |
ec81ec |
#
|
|
Chris PeBenito |
ec81ec |
define(`miscfiles_read_fonts',`
|
|
Chris PeBenito |
fa7bea |
gen_require(`$0'_depend)
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
# FIXME: search usr_t dir
|
|
Chris PeBenito |
0c73cd |
# FIXME: search lib_t dir
|
|
Chris PeBenito |
0c73cd |
# cjp: fonts can be in either of the above dirs
|
|
Chris PeBenito |
80048c |
allow $1 fonts_t:dir r_dir_perms;
|
|
Chris PeBenito |
80048c |
allow $1 fonts_t:file r_file_perms;
|
|
Chris PeBenito |
ec81ec |
')
|
|
Chris PeBenito |
ec81ec |
|
|
Chris PeBenito |
ec81ec |
define(`miscfiles_read_fonts_depend',`
|
|
Chris PeBenito |
0c73cd |
type fonts_t;
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
80048c |
class dir r_dir_perms;
|
|
Chris PeBenito |
80048c |
class file r_file_perms;
|
|
Chris PeBenito |
ec81ec |
')
|
|
Chris PeBenito |
ec81ec |
|
|
Chris PeBenito |
ec81ec |
########################################
|
|
Chris PeBenito |
3865d6 |
## <interface name="miscfiles_read_localization">
|
|
Chris PeBenito |
3865d6 |
## <description>
|
|
Chris PeBenito |
3865d6 |
## Allow process to read localization info
|
|
Chris PeBenito |
3865d6 |
## </description>
|
|
Chris PeBenito |
3865d6 |
## <securitydesc>
|
|
Chris PeBenito |
3865d6 |
## ...
|
|
Chris PeBenito |
3865d6 |
## </securitydesc>
|
|
Chris PeBenito |
3865d6 |
## <parameter name="domain">
|
|
Chris PeBenito |
3865d6 |
## Type type of the process performing this action.
|
|
Chris PeBenito |
3865d6 |
## </parameter>
|
|
Chris PeBenito |
3865d6 |
## </interface>
|
|
Chris PeBenito |
b4cd15 |
#
|
|
Chris PeBenito |
b4cd15 |
define(`miscfiles_read_localization',`
|
|
Chris PeBenito |
fa7bea |
gen_require(`$0'_depend)
|
|
Chris PeBenito |
118186 |
|
|
Chris PeBenito |
0c73cd |
# FIXME: $1 read etc_t:lnk_file here
|
|
Chris PeBenito |
0c73cd |
# FIXME: $1 search usr_t:dir here
|
|
Chris PeBenito |
80048c |
allow $1 locale_t:dir r_dir_perms;
|
|
Chris PeBenito |
80048c |
allow $1 locale_t:lnk_file r_file_perms;
|
|
Chris PeBenito |
80048c |
allow $1 locale_t:file r_file_perms;
|
|
Chris PeBenito |
118186 |
|
|
Chris PeBenito |
0c73cd |
# why?
|
|
Chris PeBenito |
c9428d |
libs_read_lib($1)
|
|
Chris PeBenito |
b4cd15 |
')
|
|
Chris PeBenito |
b4cd15 |
|
|
Chris PeBenito |
b4cd15 |
define(`miscfiles_read_localization_depend',`
|
|
Chris PeBenito |
0c73cd |
type locale_t;
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
80048c |
class dir r_dir_perms;
|
|
Chris PeBenito |
80048c |
class lnk_file r_file_perms;
|
|
Chris PeBenito |
80048c |
class file r_file_perms;
|
|
Chris PeBenito |
b4cd15 |
')
|
|
Chris PeBenito |
0fef98 |
|
|
Chris PeBenito |
0fef98 |
########################################
|
|
Chris PeBenito |
3865d6 |
## <interface name="miscfiles_legacy_read_localization">
|
|
Chris PeBenito |
3865d6 |
## <description>
|
|
Chris PeBenito |
3865d6 |
## Allow process to read legacy time localization info
|
|
Chris PeBenito |
3865d6 |
## </description>
|
|
Chris PeBenito |
3865d6 |
## <securitydesc>
|
|
Chris PeBenito |
3865d6 |
## ...
|
|
Chris PeBenito |
3865d6 |
## </securitydesc>
|
|
Chris PeBenito |
3865d6 |
## <parameter name="domain">
|
|
Chris PeBenito |
3865d6 |
## Type type of the process performing this action.
|
|
Chris PeBenito |
3865d6 |
## </parameter>
|
|
Chris PeBenito |
3865d6 |
## </interface>
|
|
Chris PeBenito |
0fef98 |
#
|
|
Chris PeBenito |
0fef98 |
define(`miscfiles_legacy_read_localization',`
|
|
Chris PeBenito |
fa7bea |
gen_require(`$0'_depend)
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
miscfiles_read_localization($1)
|
|
Chris PeBenito |
0c73cd |
allow $1 locale_t:file execute;
|
|
Chris PeBenito |
0fef98 |
')
|
|
Chris PeBenito |
0fef98 |
|
|
Chris PeBenito |
0fef98 |
define(`miscfiles_read_localization_depend',`
|
|
Chris PeBenito |
0c73cd |
type locale_t;
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
class file execute;
|
|
Chris PeBenito |
0fef98 |
')
|
|
Chris PeBenito |
24280a |
|
|
Chris PeBenito |
24280a |
########################################
|
|
Chris PeBenito |
3865d6 |
## <interface name="miscfiles_read_man_pages">
|
|
Chris PeBenito |
3865d6 |
## <description>
|
|
Chris PeBenito |
3865d6 |
## Allow process to read manpages
|
|
Chris PeBenito |
3865d6 |
## </description>
|
|
Chris PeBenito |
3865d6 |
## <securitydesc>
|
|
Chris PeBenito |
3865d6 |
## ...
|
|
Chris PeBenito |
3865d6 |
## </securitydesc>
|
|
Chris PeBenito |
3865d6 |
## <parameter name="domain">
|
|
Chris PeBenito |
3865d6 |
## Type type of the process performing this action.
|
|
Chris PeBenito |
3865d6 |
## </parameter>
|
|
Chris PeBenito |
3865d6 |
## </interface>
|
|
Chris PeBenito |
24280a |
#
|
|
Chris PeBenito |
24280a |
define(`miscfiles_read_man_pages',`
|
|
Chris PeBenito |
fa7bea |
gen_require(`$0'_depend)
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
0c73cd |
# FIXME: search usr_t dir
|
|
Chris PeBenito |
80048c |
allow $1 man_t:dir r_dir_perms;
|
|
Chris PeBenito |
80048c |
allow $1 man_t:file r_file_perms;
|
|
Chris PeBenito |
80048c |
allow $1 man_t:lnk_file r_file_perms;
|
|
Chris PeBenito |
24280a |
')
|
|
Chris PeBenito |
24280a |
|
|
Chris PeBenito |
24280a |
define(`miscfiles_read_man_pages_depend',`
|
|
Chris PeBenito |
0c73cd |
type man_t;
|
|
Chris PeBenito |
0c73cd |
|
|
Chris PeBenito |
80048c |
class dir r_dir_perms;
|
|
Chris PeBenito |
80048c |
class file r_file_perms;
|
|
Chris PeBenito |
80048c |
class lnk_file r_file_perms;
|
|
Chris PeBenito |
24280a |
')
|
|
Chris PeBenito |
3865d6 |
|
|
Chris PeBenito |
3865d6 |
## </module>
|