#

# GNOME related types 

#

# Author: Ivan Gyurdiev <ivg2@cornell.edu>

#

# gnome_domain(role_prefix) - create GNOME domain (run for each role)

# gnome_application(app_prefix, role_prefix) - common stuff for gnome apps

# gnome_file_dialog(role_prefix) - gnome file dialog rules

# gnome_private_store(app_prefix, role_prefix) - store private files in .gnome2_private

define(`gnome_domain', `

# Types for .gnome2 and .gnome2_private.

# For backwards compatibility, allow unrestricted

# access from ROLE_t. However, content inside

# *should* be labeled per application eventually.

# For .gnome2_private, use the private_store macro below. 

type $1_gnome_settings_t, file_type, $1_file_type, sysadmfile;

create_dir_file($1_t, $1_gnome_settings_t)

allow $1_t $1_gnome_settings_t:{ dir file } { relabelfrom relabelto };

type $1_gnome_secret_t, file_type, $1_file_type, sysadmfile;

create_dir_file($1_t, $1_gnome_secret_t)

allow $1_t $1_gnome_secret_t:{ dir file } { relabelfrom relabelto };

# GConf domain

gconfd_domain($1)

gconf_client($1, $1)

# Bonobo-activation-server

bonobo_domain($1)

bonobo_client($1, $1)

# GNOME vfs daemon

gnome_vfs_domain($1)

gnome_vfs_client($1, $1)

# ICE is necessary for session management

ice_domain($1, $1)

')

#################################

define(`gnome_application', `

# If launched from a terminal

access_terminal($1_t, $2)

# Forking is generally okay

allow $1_t self:process { sigchld sigkill signal setrlimit getsched setsched fork };

allow $1_t self:fifo_file rw_file_perms;

# Shlib, locale, sysctl, proc

uses_shlib($1_t)

read_locale($1_t)

read_sysctl($1_t)

allow $1_t { self proc_t }:dir { search read getattr };

allow $1_t { self proc_t }:{ file lnk_file } { read getattr };

# Most gnome apps use bonobo

bonobo_client($1, $2)

# Within-process bonobo-activation of components

bonobo_connect($1, $1)

# Session management happens over ICE

# FIXME: More specific context is needed for gnome-session

ice_connect($1, $2)

# Most talk to GConf

gconf_client($1, $2)

# Allow getattr/read/search of .gnome2 and .gnome2_private

# Reading files should *not* be allowed - instead, more specific

# types should be created to handle such requests

allow $1_t { $2_gnome_settings_t $2_gnome_secret_t }:dir r_dir_perms;

# Access /etc/mtab, /etc/nsswitch.conf

allow $1_t etc_t:file { read getattr };

allow $1_t etc_runtime_t:file { read getattr };

# Themes, gtkrc

allow $1_t usr_t:{ file lnk_file } r_file_perms;

') dnl gnome_application

################################

define(`gnome_file_dialog', `

# GNOME Open/Save As dialogs 

dontaudit_getattr($1_t)

dontaudit_search_dir($1_t)

# Bonobo connection to gnome_vfs daemon

bonobo_connect($1, $2_gnome_vfs)

') dnl gnome_file_dialog

################################

define(`gnome_private_store', `

# Type for storing secret data

# (different from home, not directly accessible from ROLE_t)

type $1_secret_t, file_type, $2_file_type, sysadmfile;

# Put secret files in .gnome2_private

file_type_auto_trans($1_t, $2_gnome_secret_t, $1_secret_t, file);

allow $2_t $1_secret_t:file unlink;

') dnl gnome_private_store