## Remote login daemon. ######################################## ## ## Execute rlogind in the rlogin domain. ## ## ## ## Domain allowed to transition. ## ## # interface(`rlogin_domtrans',` gen_require(` type rlogind_t, rlogind_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, rlogind_exec_t, rlogind_t) ') ######################################## ## ## Read rlogin user home content. ## ## ## ## Domain allowed access. ## ## # interface(`rlogin_read_home_content',` gen_require(` type rlogind_home_t; ') userdom_search_user_home_dirs($1) list_dirs_pattern($1, rlogind_home_t, rlogind_home_t) read_files_pattern($1, rlogind_home_t, rlogind_home_t) read_lnk_files_pattern($1, rlogind_home_t, rlogind_home_t) ') ######################################## ## ## Create, read, write, and delete ## rlogind home files. ## ## ## ## Domain allowed access. ## ## # interface(`rlogin_manage_rlogind_home_files',` gen_require(` type rlogind_home_t; ') userdom_search_user_home_dirs($1) allow $1 rlogind_home_t:file manage_file_perms; ') ######################################## ## ## Relabel rlogind home files. ## ## ## ## Domain allowed access. ## ## # interface(`rlogin_relabel_rlogind_home_files',` gen_require(` type rlogind_home_t; ') userdom_search_user_home_dirs($1) allow $1 rlogind_home_t:file relabel_file_perms; ') ######################################## ## ## Create objects in user home ## directories with the rlogind home type. ## ## ## ## Domain allowed access. ## ## ## ## ## Class of the object being created. ## ## ## ## ## The name of the object being created. ## ## # interface(`rlogin_home_filetrans_logind_home',` gen_require(` type rlogind_home_t; ') userdom_user_home_dir_filetrans($1, rlogind_home_t, $2, $3) ') ######################################## ## ## Create, read, write, and delete ## rlogind temporary content. ## ## ## ## Domain allowed access. ## ## # interface(`rlogin_manage_rlogind_tmp_content',` gen_require(` type rlogind_tmp_t; ') files_search_tmp($1) allow $1 rlogind_tmp_t:dir manage_dir_perms; allow $1 rlogind_tmp_t:file manage_file_perms; ') ######################################## ## ## Relabel rlogind temporary content. ## ## ## ## Domain allowed access. ## ## # interface(`rlogin_relabel_rlogind_tmp_content',` gen_require(` type rlogind_tmp_t; ') files_search_tmp($1) allow $1 rlogind_tmp_t:dir relabel_dir_perms; allow $1 rlogind_tmp_t:file relabel_file_perms; ')