#

# GNOME VFS daemon  

#

# Author: Ivan Gyurdiev <ivg2@cornell.edu>

#

#######################################

# gnome_vfs_domain(role_prefix)

#

define(`gnome_vfs_domain', `

# Type for daemon

type $1_gnome_vfs_t, domain, nscd_client_domain;

# GNOME, dbus

gnome_application($1_gnome_vfs, $1)

dbusd_client(system, $1_gnome_vfs)

allow $1_gnome_vfs_t system_dbusd_t:dbus send_msg;

ifdef(`hald.te', `

allow $1_gnome_vfs_t hald_t:dbus send_msg;

allow hald_t $1_gnome_vfs_t:dbus send_msg;

')

# Transition from user type

domain_auto_trans($1_t, gnome_vfs_exec_t, $1_gnome_vfs_t)

role $1_r types $1_gnome_vfs_t; 

# Stat top level directories on mount_points (check free space?)

allow $1_gnome_vfs_t { fs_type default_t boot_t home_root_t device_t }:dir getattr;

# Search path to /home (??)

allow $1_gnome_vfs_t home_root_t:dir search;

allow $1_gnome_vfs_t $1_home_dir_t:dir search;

# Search path to rpc_pipefs mount point (??)

allow $1_gnome_vfs_t var_lib_nfs_t:dir search;

allow $1_gnome_vfs_t var_lib_t:dir search;

# Search libexec (??)

allow $1_gnome_vfs_t bin_t:dir search;

can_exec($1_gnome_vfs_t, bin_t)

') dnl gnome_vfs_domain

#####################################

# gnome_vfs_client(prefix, role_prefix)

#

define(`gnome_vfs_client', `

# Connect over bonobo

bonobo_connect($1, $2_gnome_vfs)

') dnl gnome_vfs_client