diff --git a/docs/macro_conversion_guide b/docs/macro_conversion_guide index 00be218..97395f6 100644 --- a/docs/macro_conversion_guide +++ b/docs/macro_conversion_guide @@ -1197,11 +1197,11 @@ files_filetrans_tmp($1_t, $1_tmp_t, $3) # type $1_tmpfs_t; files_tmpfs_file($1_tmpfs_t) -allow $1_t $1_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write }; -allow $1_t $1_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename }; -allow $1_t $1_tmpfs_t:lnk_file { create read getattr setattr link unlink rename }; -allow $1_t $1_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename }; -allow $1_t $1_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename }; +allow $1_t $1_tmpfs_t:dir rw_dir_perms; +allow $1_t $1_tmpfs_t:file manage_file_perms; +allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms; +allow $1_t $1_tmpfs_t:sock_file manage_file_perms; +allow $1_t $1_tmpfs_t:fifo_file manage_file_perms; fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file }) # @@ -1254,3 +1254,18 @@ allow $1 $1_var_run_t:dir create_dir_perms; allow $1 $1_var_run_t:lnk_file create_lnk_perms; # else: allow $1 $1_var_run_t:$2 create_file_perms; + +# +# x_client_domain($1,$2): complete +# +type $1_tmpfs_t; +files_tmpfs_file($1_tmpfs_t) +allow $1_t $1_tmpfs_t:dir rw_dir_perms; +allow $1_t $1_tmpfs_t:file manage_file_perms; +allow $1_t $1_tmpfs_t:lnk_file create_lnk_perms; +allow $1_t $1_tmpfs_t:sock_file manage_file_perms; +allow $1_t $1_tmpfs_t:fifo_file manage_file_perms; +fs_filetrans_tmpfs($1_t,$1_tmpfs_t,{ dir file lnk_file sock_file fifo_file }) +optional_policy(`xserver',` +xserver_user_client_template($2,$1_t,$1_tmpfs_t) +')