1491 lines
32 KiB
Plaintext
1491 lines
32 KiB
Plaintext
## <summary>
|
|
## Freedesktop standard locations (formerly known as X Desktop Group)
|
|
## </summary>
|
|
|
|
|
|
########################################
|
|
## <summary>
|
|
## Mark the selected type as an xdg_cache_type
|
|
## </summary>
|
|
## <param name="type">
|
|
## <summary>
|
|
## Type to give the xdg_cache_type attribute to
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_cache_content',`
|
|
gen_require(`
|
|
attribute xdg_cache_type;
|
|
')
|
|
|
|
typeattribute $1 xdg_cache_type;
|
|
|
|
userdom_user_home_content($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Mark the selected type as an xdg_config_type
|
|
## </summary>
|
|
## <param name="type">
|
|
## <summary>
|
|
## Type to give the xdg_config_type attribute to
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_config_content',`
|
|
gen_require(`
|
|
attribute xdg_config_type;
|
|
')
|
|
|
|
typeattribute $1 xdg_config_type;
|
|
|
|
userdom_user_home_content($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Mark the selected type as an xdg_data_type
|
|
## </summary>
|
|
## <param name="type">
|
|
## <summary>
|
|
## Type to give the xdg_data_type attribute to
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_data_content',`
|
|
gen_require(`
|
|
attribute xdg_data_type;
|
|
')
|
|
|
|
typeattribute $1 xdg_data_type;
|
|
|
|
userdom_user_home_content($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Search through the xdg cache home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_search_cache_dirs',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
search_dirs_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg cache home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_cache_dirs',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
allow $1 xdg_cache_t:dir watch;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch all the xdg cache home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_all_cache_dirs',`
|
|
gen_require(`
|
|
attribute xdg_cache_type;
|
|
')
|
|
|
|
allow $1 xdg_cache_type:dir watch;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read the xdg cache home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_cache_files',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
allow $1 xdg_cache_t:file map;
|
|
list_dirs_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
read_lnk_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read all xdg_cache_type files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_all_cache_files',`
|
|
gen_require(`
|
|
attribute xdg_cache_type;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
allow $1 xdg_cache_type:file map;
|
|
list_dirs_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
read_lnk_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in an xdg_cache directory
|
|
## with an automatic type transition to
|
|
## a specified private type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="private_type">
|
|
## <summary>
|
|
## The type of the object to create.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the file or directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_cache_filetrans',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
|
|
filetrans_pattern($1, xdg_cache_t, $2, $3, $4)
|
|
|
|
xdg_create_cache_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_cache_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_cache',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_cache_t, $2, $3)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create xdg cache home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_create_cache_dirs',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
allow $1 xdg_cache_t:dir create_dir_perms;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Manage the xdg cache home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_cache',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
manage_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
allow $1 xdg_cache_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
manage_fifo_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
manage_sock_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Manage all the xdg cache home files regardless of their specific type
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_all_cache',`
|
|
gen_require(`
|
|
attribute xdg_cache_type;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
manage_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
allow $1 xdg_cache_type:file map;
|
|
manage_lnk_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
manage_fifo_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
manage_sock_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the xdg cache home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_cache',`
|
|
gen_require(`
|
|
type xdg_cache_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
relabel_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
relabel_lnk_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
relabel_fifo_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
relabel_sock_files_pattern($1, xdg_cache_t, xdg_cache_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the xdg cache home files, regardless of their specific type
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_all_cache',`
|
|
gen_require(`
|
|
attribute xdg_cache_type;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
relabel_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
relabel_lnk_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
relabel_fifo_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
relabel_sock_files_pattern($1, xdg_cache_type, xdg_cache_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Search through the xdg config home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_search_config_dirs',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
search_dirs_pattern($1, xdg_config_t, xdg_config_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg config home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_config_dirs',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
allow $1 xdg_config_t:dir watch;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch all the xdg config home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_all_config_dirs',`
|
|
gen_require(`
|
|
attribute xdg_config_type;
|
|
')
|
|
|
|
allow $1 xdg_config_type:dir watch;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read the xdg config home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_config_files',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
allow $1 xdg_config_t:file map;
|
|
list_dirs_pattern($1, xdg_config_t, xdg_config_t)
|
|
read_lnk_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read all xdg_config_type files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_all_config_files',`
|
|
gen_require(`
|
|
attribute xdg_config_type;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
allow $1 xdg_config_type:file map;
|
|
list_dirs_pattern($1, xdg_config_type, xdg_config_type)
|
|
read_lnk_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in an xdg_config directory
|
|
## with an automatic type transition to
|
|
## a specified private type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="private_type">
|
|
## <summary>
|
|
## The type of the object to create.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the file or directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_config_filetrans',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
|
|
filetrans_pattern($1, xdg_config_t, $2, $3, $4)
|
|
|
|
xdg_create_config_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_config_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_config',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_config_t, $2, $3)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create xdg config home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_create_config_dirs',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
allow $1 xdg_config_t:dir create_dir_perms;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Manage the xdg config home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_config',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_config_t, xdg_config_t)
|
|
manage_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
allow $1 xdg_config_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
manage_fifo_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
manage_sock_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Manage all the xdg config home files regardless of their specific type
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_all_config',`
|
|
gen_require(`
|
|
attribute xdg_config_type;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_config_type, xdg_config_type)
|
|
manage_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
allow $1 xdg_config_type:file map;
|
|
manage_lnk_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
manage_fifo_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
manage_sock_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the xdg config home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_config',`
|
|
gen_require(`
|
|
type xdg_config_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_config_t, xdg_config_t)
|
|
relabel_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
relabel_lnk_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
relabel_fifo_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
relabel_sock_files_pattern($1, xdg_config_t, xdg_config_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the xdg config home files, regardless of their specific type
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_all_config',`
|
|
gen_require(`
|
|
attribute xdg_config_type;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_config_type, xdg_config_type)
|
|
relabel_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
relabel_lnk_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
relabel_fifo_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
relabel_sock_files_pattern($1, xdg_config_type, xdg_config_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg data home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_data_dirs',`
|
|
gen_require(`
|
|
type xdg_data_t;
|
|
')
|
|
|
|
allow $1 xdg_data_t:dir watch;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch all the xdg data home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_all_data_dirs',`
|
|
gen_require(`
|
|
attribute xdg_data_type;
|
|
')
|
|
|
|
allow $1 xdg_data_type:dir watch;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read the xdg data home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_data_files',`
|
|
gen_require(`
|
|
type xdg_data_t;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
allow $1 xdg_data_t:file map;
|
|
list_dirs_pattern($1, xdg_data_t, xdg_data_t)
|
|
read_lnk_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read all xdg_data_type files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_all_data_files',`
|
|
gen_require(`
|
|
attribute xdg_data_type;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
allow $1 xdg_data_type:file map;
|
|
list_dirs_pattern($1, xdg_data_type, xdg_data_type)
|
|
read_lnk_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in an xdg_data directory
|
|
## with an automatic type transition to
|
|
## a specified private type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="private_type">
|
|
## <summary>
|
|
## The type of the object to create.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Optional name of the file or directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_data_filetrans',`
|
|
gen_require(`
|
|
type xdg_data_t;
|
|
')
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
|
|
filetrans_pattern($1, xdg_data_t, $2, $3, $4)
|
|
|
|
xdg_create_data_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_data_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_data',`
|
|
gen_require(`
|
|
type xdg_data_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_data_t, $2, $3)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create xdg data home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_create_data_dirs',`
|
|
gen_require(`
|
|
type xdg_data_t;
|
|
')
|
|
|
|
allow $1 xdg_data_t:dir create_dir_perms;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Manage the xdg data home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_data',`
|
|
gen_require(`
|
|
type xdg_data_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_data_t, xdg_data_t)
|
|
manage_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
allow $1 xdg_data_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
manage_fifo_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
manage_sock_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Manage all the xdg data home files, regardless of their specific type
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_all_data',`
|
|
gen_require(`
|
|
attribute xdg_data_type;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_data_type, xdg_data_type)
|
|
manage_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
allow $1 xdg_data_type:file map;
|
|
manage_lnk_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
manage_fifo_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
manage_sock_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the xdg data home files
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_data',`
|
|
gen_require(`
|
|
type xdg_data_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_data_t, xdg_data_t)
|
|
relabel_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
relabel_lnk_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
relabel_fifo_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
relabel_sock_files_pattern($1, xdg_data_t, xdg_data_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the xdg data home files, regardless of their type
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_all_data',`
|
|
gen_require(`
|
|
attribute xdg_data_type;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_data_type, xdg_data_type)
|
|
relabel_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
relabel_lnk_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
relabel_fifo_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
relabel_sock_files_pattern($1, xdg_data_type, xdg_data_type)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg documents home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_documents_dirs',`
|
|
gen_require(`
|
|
type xdg_documents_t;
|
|
')
|
|
|
|
allow $1 xdg_documents_t:dir watch;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_documents_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_documents',`
|
|
gen_require(`
|
|
type xdg_documents_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_documents_t, $2, $3)
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Manage documents content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_documents',`
|
|
gen_require(`
|
|
type xdg_documents_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_documents_t, xdg_documents_t)
|
|
manage_files_pattern($1, xdg_documents_t, xdg_documents_t)
|
|
allow $1 xdg_documents_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_documents_t, xdg_documents_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the documents resources
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_documents',`
|
|
gen_require(`
|
|
type xdg_documents_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_documents_t, xdg_documents_t)
|
|
relabel_files_pattern($1, xdg_documents_t, xdg_documents_t)
|
|
relabel_lnk_files_pattern($1, xdg_documents_t, xdg_documents_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg downloads home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_downloads_dirs',`
|
|
gen_require(`
|
|
type xdg_downloads_t;
|
|
')
|
|
|
|
allow $1 xdg_downloads_t:dir watch;
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Read downloaded content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_downloads',`
|
|
gen_require(`
|
|
type xdg_downloads_t;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
allow $1 xdg_downloads_t:file map;
|
|
list_dirs_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
read_lnk_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Create downloaded content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_create_downloads',`
|
|
gen_require(`
|
|
type xdg_downloads_t;
|
|
')
|
|
|
|
create_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
allow $1 xdg_downloads_t:file map;
|
|
create_dirs_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
create_lnk_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Write downloaded content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_write_downloads',`
|
|
gen_require(`
|
|
type xdg_downloads_t;
|
|
')
|
|
|
|
write_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
allow $1 xdg_downloads_t:file map;
|
|
list_dirs_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
read_lnk_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_downloads_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_downloads',`
|
|
gen_require(`
|
|
type xdg_downloads_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_downloads_t, $2, $3)
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Manage downloaded content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_downloads',`
|
|
gen_require(`
|
|
type xdg_downloads_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
manage_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
allow $1 xdg_downloads_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the downloads resources
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_downloads',`
|
|
gen_require(`
|
|
type xdg_downloads_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
relabel_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
relabel_lnk_files_pattern($1, xdg_downloads_t, xdg_downloads_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg pictures home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_pictures_dirs',`
|
|
gen_require(`
|
|
type xdg_pictures_t;
|
|
')
|
|
|
|
allow $1 xdg_pictures_t:dir watch;
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Read user pictures content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_pictures',`
|
|
gen_require(`
|
|
type xdg_pictures_t;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
allow $1 xdg_pictures_t:file map;
|
|
list_dirs_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
read_lnk_files_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_pictures_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_pictures',`
|
|
gen_require(`
|
|
type xdg_pictures_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_pictures_t, $2, $3)
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Manage pictures content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_pictures',`
|
|
gen_require(`
|
|
type xdg_pictures_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
manage_files_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
allow $1 xdg_pictures_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the pictures resources
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_pictures',`
|
|
gen_require(`
|
|
type xdg_pictures_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
relabel_files_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
relabel_lnk_files_pattern($1, xdg_pictures_t, xdg_pictures_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg music home directories
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_music_dirs',`
|
|
gen_require(`
|
|
type xdg_music_t;
|
|
')
|
|
|
|
allow $1 xdg_music_t:dir watch;
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Read user music content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_music',`
|
|
gen_require(`
|
|
type xdg_music_t;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_music_t, xdg_music_t)
|
|
allow $1 xdg_music_t:file map;
|
|
list_dirs_pattern($1, xdg_music_t, xdg_music_t)
|
|
read_lnk_files_pattern($1, xdg_music_t, xdg_music_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_pictures_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_music',`
|
|
gen_require(`
|
|
type xdg_music_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_music_t, $2, $3)
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Manage music content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_music',`
|
|
gen_require(`
|
|
type xdg_music_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_music_t, xdg_music_t)
|
|
manage_files_pattern($1, xdg_music_t, xdg_music_t)
|
|
allow $1 xdg_music_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_music_t, xdg_music_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the music resources
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_music',`
|
|
gen_require(`
|
|
type xdg_music_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_music_t, xdg_music_t)
|
|
relabel_files_pattern($1, xdg_music_t, xdg_music_t)
|
|
relabel_lnk_files_pattern($1, xdg_music_t, xdg_music_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Watch the xdg video content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_watch_videos_dirs',`
|
|
gen_require(`
|
|
type xdg_videos_t;
|
|
')
|
|
|
|
allow $1 xdg_videos_t:dir watch;
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Read user video content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_read_videos',`
|
|
gen_require(`
|
|
type xdg_videos_t;
|
|
')
|
|
|
|
read_files_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
allow $1 xdg_videos_t:file map;
|
|
list_dirs_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
read_lnk_files_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create objects in the user home dir with an automatic type transition to
|
|
## the xdg_videos_t type.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="object_class">
|
|
## <summary>
|
|
## The class of the object to be created.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="filename" optional="true">
|
|
## <summary>
|
|
## Name of the directory created
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_generic_user_home_dir_filetrans_videos',`
|
|
gen_require(`
|
|
type xdg_videos_t;
|
|
')
|
|
|
|
userdom_user_home_dir_filetrans($1, xdg_videos_t, $2, $3)
|
|
')
|
|
|
|
#########################################
|
|
## <summary>
|
|
## Manage video content
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_manage_videos',`
|
|
gen_require(`
|
|
type xdg_videos_t;
|
|
')
|
|
|
|
manage_dirs_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
manage_files_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
allow $1 xdg_videos_t:file map;
|
|
manage_lnk_files_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Allow relabeling the videos resources
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`xdg_relabel_videos',`
|
|
gen_require(`
|
|
type xdg_videos_t;
|
|
')
|
|
|
|
relabel_dirs_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
relabel_files_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
relabel_lnk_files_pattern($1, xdg_videos_t, xdg_videos_t)
|
|
|
|
userdom_search_user_home_dirs($1)
|
|
')
|