28 lines
585 B
Plaintext
28 lines
585 B
Plaintext
|
|
||
|
|
policy_module(gpg, 1.0)
|
||
|
|
|
||
|
|
########################################
|
||
|
|
#
|
||
|
|
# Declarations
|
||
|
|
#
|
||
|
|
|
||
|
|
# Allow gpg exec stack
|
||
|
|
bool allow_gpg_execstack false;
|
||
|
|
|
||
|
|
# Type for gpg or pgp executables.
|
||
|
|
type gpg_exec_t;
|
||
|
|
type gpg_helper_exec_t;
|
||
|
|
files_make_file(gpg_exec_t)
|
||
|
|
files_make_file(gpg_helper_exec_t)
|
||
|
|
|
||
|
|
# Type for the gpg-agent executable.
|
||
|
|
type gpg_agent_exec_t;
|
||
|
|
files_make_file(gpg_agent_exec_t)
|
||
|
|
|
||
|
|
# type for the pinentry executable
|
||
|
|
type pinentry_exec_t;
|
||
|
|
files_make_file(pinentry_exec_t)
|
||
|
|
|
||
|
|
#allow sysadm_gpg_t { home_root_t user_home_dir_t }:dir search;
|
||
|
|
#allow sysadm_gpg_t ptyfile:chr_file rw_file_perms;
|