Chris PeBenito 9726b3
Chris PeBenito 9726b3
policy_module(unconfined,1.0)
Chris PeBenito 9726b3
Chris PeBenito 9726b3
########################################
Chris PeBenito 9726b3
#
Chris PeBenito 9726b3
# Declarations
Chris PeBenito 9726b3
#
Chris PeBenito 9726b3
Chris PeBenito 9726b3
type unconfined_t;
Chris PeBenito 9726b3
type unconfined_exec_t;
Chris PeBenito 9726b3
init_system_domain(unconfined_t,unconfined_exec_t)
Chris PeBenito 9726b3
role system_r types unconfined_t;
Chris PeBenito 9726b3
Chris PeBenito 9726b3
########################################
Chris PeBenito 9726b3
#
Chris PeBenito 9726b3
# Local policy
Chris PeBenito 9726b3
#
Chris PeBenito 9726b3
Chris PeBenito c98340
unconfined_domain_template(unconfined_t)
Chris PeBenito a42ca7
Chris PeBenito 9726b3
logging_send_syslog_msg(unconfined_t)
Chris PeBenito 9726b3
Chris PeBenito c98340
ifdef(`targeted_policy',`
Chris PeBenito c98340
	allow unconfined_t self:system syslog_read;
Chris PeBenito c98340
Chris PeBenito c98340
	# Define some type aliases to help with compatibility with
Chris PeBenito c98340
	# macros and domains from the "strict" policy.
Chris PeBenito 142e9f
	# cjp: remove xdm_t when we get to that module
Chris PeBenito 142e9f
	typealias unconfined_t alias { secadm_t sysadm_t xdm_t };
Chris PeBenito c98340
Chris PeBenito a42ca7
	init_domtrans_script(unconfined_t)
Chris PeBenito a42ca7
Chris PeBenito c98340
	userdom_unconfined(unconfined_t)
Chris PeBenito c98340
Chris PeBenito c98340
	ifdef(`TODO',`
Chris PeBenito c98340
	ifdef(`samba.te', `samba_domain(user)')
Chris PeBenito c98340
	') dnl end TODO
Chris PeBenito c98340
')