Chris PeBenito 9401ae1
## <summary>IRC client policy</summary>
Chris PeBenito 9401ae1
Chris PeBenito 9401ae1
########################################
Chris PeBenito 9401ae1
## <summary>
Chris PeBenito 9401ae1
##	Role access for IRC
Chris PeBenito 9401ae1
## </summary>
Chris PeBenito 9401ae1
## <param name="role">
Chris PeBenito 9401ae1
##	<summary>
Chris PeBenito 9401ae1
##	Role allowed access
Chris PeBenito 9401ae1
##	</summary>
Chris PeBenito 9401ae1
## </param>
Chris PeBenito 9401ae1
## <param name="domain">
Chris PeBenito 9401ae1
##	<summary>
Chris PeBenito 9401ae1
##	User domain for the role
Chris PeBenito 9401ae1
##	</summary>
Chris PeBenito 9401ae1
## </param>
Chris PeBenito 9401ae1
#
Chris PeBenito 9401ae1
interface(`irc_role',`
Chris PeBenito 9401ae1
	gen_require(`
Chris PeBenito 9401ae1
		type irc_t, irc_exec_t;
Chris PeBenito 9401ae1
	')
Chris PeBenito 9401ae1
Chris PeBenito 9401ae1
	role $1 types irc_t;
Chris PeBenito 9401ae1
Chris PeBenito 9401ae1
	# Transition from the user domain to the derived domain.
Chris PeBenito 9401ae1
	domtrans_pattern($2, irc_exec_t, irc_t)
Chris PeBenito 9401ae1
Chris PeBenito 9401ae1
	# allow ps to show irc
Chris PeBenito 9401ae1
	ps_process_pattern($2, irc_t)
Chris PeBenito 9401ae1
	allow $2 irc_t:process signal;
Chris PeBenito 9401ae1
')