#

# Bonobo

#

# Author: Ivan Gyurdiev <ivg2@cornell.edu>

#

# bonobo_domain(role_prefix) - invoke per role

# bonobo_client(app_prefix, role_prefix) - invoke per client app

# bonobo_connect(type1_prefix, type2_prefix) - 

# 	connect two bonobo clients, the channel is bidirectional

######################

define(`bonobo_domain', `

# Protect against double inclusion for faster compile

ifdef(`bonobo_domain_$1', `', `

define(`bonobo_domain_$1')

# Type for daemon

type $1_bonobo_t, domain, nscd_client_domain;

# Transition from caller

domain_auto_trans($1_t, bonobo_exec_t, $1_bonobo_t)

role $1_r types $1_bonobo_t;

# Shared libraries, gconv-modules

uses_shlib($1_bonobo_t)

allow $1_bonobo_t lib_t:file r_file_perms;

read_locale($1_bonobo_t)

read_sysctl($1_bonobo_t)

# Session management 

# FIXME: More specific context is needed for gnome-session

ice_connect($1_bonobo, $1)

# nsswitch.conf

allow $1_bonobo_t etc_t:file { read getattr };

# Fork to start apps

allow $1_bonobo_t self:process { fork sigchld setpgid getsched signal };

allow $1_bonobo_t self:fifo_file rw_file_perms;

# ??? 

allow $1_bonobo_t root_t:dir search;

allow $1_bonobo_t home_root_t:dir search;

allow $1_bonobo_t $1_home_dir_t:dir search;

# libexec ??? 

allow $1_bonobo_t bin_t:dir search;

# ORBit sockets for bonobo

orbit_domain($1_bonobo, $1)

# Bonobo can launch evolution

ifdef(`evolution.te', `

domain_auto_trans($1_bonobo_t, evolution_exec_t, $1_evolution_t)

domain_auto_trans($1_bonobo_t, evolution_alarm_exec_t, $1_evolution_alarm_t)

domain_auto_trans($1_bonobo_t, evolution_webcal_exec_t, $1_evolution_webcal_t)

domain_auto_trans($1_bonobo_t, evolution_server_exec_t, $1_evolution_server_t)

domain_auto_trans($1_bonobo_t, evolution_exchange_exec_t, $1_evolution_exchange_t)

')

# Bonobo can launch GNOME vfs daemon

ifdef(`gnome_vfs.te', `

domain_auto_trans($1_bonobo_t, gnome_vfs_exec_t, $1_gnome_vfs_t)

')

# Transition to ROLE_t on bin_t apps

# FIXME: The goal is to get rid of this rule, as it

# defeats the purpose of a separate domain. It is only

# here temporarily, since bonobo runs as ROLE_t by default anyway

domain_auto_trans($1_bonobo_t, bin_t, $1_t) 

can_pipe_xdm($1_bonobo_t)

') dnl ifdef bonobo_domain_args

') dnl bonobo_domain

#####################

define(`bonobo_client', `

# Protect against double inclusion for faster compile

ifdef(`bonobo_client_$1_$2', `', `

define(`bonobo_client_$1_$2')

# Connect over bonobo

bonobo_connect($1, $2_gconfd, $1)

# Create ORBit sockets

orbit_domain($1, $2)

# Connect to bonobo

orbit_connect($1, $2_bonobo)

orbit_connect($2_bonobo, $1)

# Lock /tmp/bonobo-activation-register.lock

# Stat /tmp/bonobo-activation-server.ior

# FIXME: this should probably be of type $2_bonobo..

# Note that this is file, not sock_file

allow $1_t $2_orbit_tmp_t:file { getattr read write lock };

domain_auto_trans($1_t, bonobo_exec_t, $2_bonobo_t)

') dnl ifdef bonobo_client_args

') dnl bonobo_client

#####################

define(`bonobo_connect', `

# FIXME: Should there be a macro for unidirectional conn. ?

orbit_connect($1, $2)

orbit_connect($2, $1)

') dnl bonobo_connect