|
Dominick Grift |
fdb39ab |
policy_module(lightsquid, 1.0.2)
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
########################################
|
|
Dominick Grift |
8d4335e |
#
|
|
Dominick Grift |
8d4335e |
# Declarations
|
|
Dominick Grift |
8d4335e |
#
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
f5315a6 |
attribute_role lightsquid_roles;
|
|
Dominick Grift |
f5315a6 |
roleattribute system_r lightsquid_roles;
|
|
Dominick Grift |
f5315a6 |
|
|
Dominick Grift |
8d4335e |
type lightsquid_t;
|
|
Dominick Grift |
8d4335e |
type lightsquid_exec_t;
|
|
Dominick Grift |
8d4335e |
application_domain(lightsquid_t, lightsquid_exec_t)
|
|
Dominick Grift |
f5315a6 |
role lightsquid_roles types lightsquid_t;
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
type lightsquid_rw_content_t;
|
|
Dominick Grift |
8d4335e |
files_type(lightsquid_rw_content_t)
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
########################################
|
|
Dominick Grift |
8d4335e |
#
|
|
Dominick Grift |
8d4335e |
# Local policy
|
|
Dominick Grift |
8d4335e |
#
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
manage_dirs_pattern(lightsquid_t, lightsquid_rw_content_t, lightsquid_rw_content_t)
|
|
Dominick Grift |
8d4335e |
manage_files_pattern(lightsquid_t, lightsquid_rw_content_t, lightsquid_rw_content_t)
|
|
Dominick Grift |
8d4335e |
manage_lnk_files_pattern(lightsquid_t, lightsquid_rw_content_t, lightsquid_rw_content_t)
|
|
Dominick Grift |
8d4335e |
files_var_filetrans(lightsquid_t, lightsquid_rw_content_t, dir)
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
corecmd_exec_bin(lightsquid_t)
|
|
Dominick Grift |
8d4335e |
corecmd_exec_shell(lightsquid_t)
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
dev_read_urand(lightsquid_t)
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
squid_read_config(lightsquid_t)
|
|
Dominick Grift |
8d4335e |
squid_read_log(lightsquid_t)
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
optional_policy(`
|
|
Dominick Grift |
8d4335e |
apache_content_template(lightsquid)
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
list_dirs_pattern(httpd_lightsquid_script_t, lightsquid_rw_content_t, lightsquid_rw_content_t)
|
|
Dominick Grift |
8d4335e |
read_files_pattern(httpd_lightsquid_script_t, lightsquid_rw_content_t, lightsquid_rw_content_t)
|
|
Dominick Grift |
8d4335e |
read_lnk_files_pattern(httpd_lightsquid_script_t, lightsquid_rw_content_t, lightsquid_rw_content_t)
|
|
Dominick Grift |
8d4335e |
')
|
|
Dominick Grift |
8d4335e |
|
|
Dominick Grift |
8d4335e |
optional_policy(`
|
|
Dominick Grift |
8d4335e |
cron_system_entry(lightsquid_t, lightsquid_exec_t)
|
|
Dominick Grift |
8d4335e |
')
|