diff --git a/policy/modules/services/pcscd.if b/policy/modules/services/pcscd.if index 913e857..1c2a091 100644 --- a/policy/modules/services/pcscd.if +++ b/policy/modules/services/pcscd.if @@ -39,6 +39,44 @@ interface(`pcscd_read_pub_files',` ######################################## ## +## Manage pcscd pub files. +## +## +## +## Domain allowed access. +## +## +# +interface(`pcscd_manage_pub_files',` + gen_require(` + type pcscd_var_run_t; + ') + + files_search_pids($1) + manage_files_pattern($1, pcscd_var_run_t, pcscd_var_run_t) +') + +######################################## +## +## Manage pcscd pub fifo files. +## +## +## +## Domain allowed access. +## +## +# +interface(`pcscd_manage_pub_pipes',` + gen_require(` + type pcscd_var_run_t; + ') + + files_search_pids($1) + manage_fifo_files_pattern($1, pcscd_var_run_t, pcscd_var_run_t) +') + +######################################## +## ## Connect to pcscd over an unix stream socket. ## ##