selinux-refpolicy/policy/modules/roles/guest.te

policy_module(guest)

########################################
#
# Declarations
#

role guest_r;

userdom_restricted_user_template(guest)

kernel_read_system_state(guest_t)

########################################
#
# Local policy
#

optional_policy(`
	dbus_role_template(guest, guest_r, guest_t)
')

#gen_user(guest_u, user, guest_r, s0, s0)
Drop module versioning. Semodule stopped using this many years ago. The policy_module() macro will continue to support an optional second parameter as version. If it is not specified, a default value of 1 is set. Signed-off-by: Chris PeBenito <pebenito@ieee.org> 2022-01-06 13:55:54 +00:00			`policy_module(guest)`
Re-add policy modules from old refpolicy-contrib submodule. 2018-06-23 13:00:56 +00:00
			`########################################`
			`#`
			`# Declarations`
			`#`

			`role guest_r;`

			`userdom_restricted_user_template(guest)`

			`kernel_read_system_state(guest_t)`

			`########################################`
			`#`
			`# Local policy`
			`#`

various: systemd user fixes and additional support This finishes up a lot of the work originally started on systemd --user support including interacting with user units, communicating with the user's systemd instance, and reading the system journal. Signed-off-by: Kenton Groombridge <me@concord.sh> 2021-03-13 23:22:59 +00:00			optional_policy(`
			`dbus_role_template(guest, guest_r, guest_t)`
			`')`

Re-add policy modules from old refpolicy-contrib submodule. 2018-06-23 13:00:56 +00:00			`#gen_user(guest_u, user, guest_r, s0, s0)`