|
Dominick Grift |
44b69d6 |
policy_module(mono, 1.8.1)
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
########################################
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Chris PeBenito |
9401ae1 |
# Declarations
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Chris PeBenito |
9401ae1 |
|
|
Dominick Grift |
44b69d6 |
attribute mono_domain;
|
|
Dominick Grift |
44b69d6 |
|
|
Dominick Grift |
44b69d6 |
attribute_role mono_roles;
|
|
Dominick Grift |
44b69d6 |
|
|
Dominick Grift |
44b69d6 |
type mono_t, mono_domain;
|
|
Chris PeBenito |
9401ae1 |
type mono_exec_t;
|
|
Chris PeBenito |
9401ae1 |
init_system_domain(mono_t, mono_exec_t)
|
|
Dominick Grift |
44b69d6 |
role mono_roles types mono_t;
|
|
Dominick Grift |
44b69d6 |
|
|
Dominick Grift |
44b69d6 |
application_type(mono_t)
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
########################################
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Dominick Grift |
44b69d6 |
# Common local policy
|
|
Chris PeBenito |
9401ae1 |
#
|
|
Chris PeBenito |
9401ae1 |
|
|
Dominick Grift |
44b69d6 |
allow mono_domain self:process { signal getsched execheap execmem execstack };
|
|
Chris PeBenito |
9401ae1 |
|
|
Dominick Grift |
44b69d6 |
########################################
|
|
Dominick Grift |
44b69d6 |
#
|
|
Dominick Grift |
44b69d6 |
# local policy
|
|
Dominick Grift |
44b69d6 |
#
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
userdom_user_home_dir_filetrans_user_home_content(mono_t, { dir file lnk_file fifo_file sock_file })
|
|
Chris PeBenito |
9401ae1 |
|
|
Dominick Grift |
44b69d6 |
init_dbus_chat_script(mono_t)
|
|
Dominick Grift |
44b69d6 |
|
|
Chris PeBenito |
9401ae1 |
optional_policy(`
|
|
Chris PeBenito |
9401ae1 |
avahi_dbus_chat(mono_t)
|
|
Chris PeBenito |
9401ae1 |
')
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
optional_policy(`
|
|
Chris PeBenito |
9401ae1 |
cups_dbus_chat(mono_t)
|
|
Chris PeBenito |
9401ae1 |
')
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
optional_policy(`
|
|
Chris PeBenito |
9401ae1 |
hal_dbus_chat(mono_t)
|
|
Chris PeBenito |
9401ae1 |
')
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
optional_policy(`
|
|
Chris PeBenito |
9401ae1 |
networkmanager_dbus_chat(mono_t)
|
|
Chris PeBenito |
9401ae1 |
')
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
optional_policy(`
|
|
Chris PeBenito |
9401ae1 |
rpm_dbus_chat(mono_t)
|
|
Chris PeBenito |
9401ae1 |
')
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
optional_policy(`
|
|
Chris PeBenito |
9401ae1 |
unconfined_domain(mono_t)
|
|
Chris PeBenito |
9401ae1 |
unconfined_dbus_chat(mono_t)
|
|
Chris PeBenito |
9401ae1 |
unconfined_dbus_connect(mono_t)
|
|
Chris PeBenito |
9401ae1 |
')
|
|
Chris PeBenito |
9401ae1 |
|
|
Chris PeBenito |
9401ae1 |
optional_policy(`
|
|
Chris PeBenito |
9401ae1 |
xserver_rw_shm(mono_t)
|
|
Chris PeBenito |
9401ae1 |
')
|