selinux-refpolicy/refpolicy/policy/modules/services/cups.if

20 lines
434 B
Plaintext

## <summary>Common UNIX printing system</summary>
########################################
## <summary>
## Read cups-writable configuration files.
## </summary>
## <param name="domain">
## Domain allowed access.
## </param>
#
interface(`cups_read_rw_config',`
gen_require(`
type cupsd_etc_t, cupsd_rw_etc_t;
')
files_search_etc($1)
allow $1 cupsd_etc_t:dir search_dir_perms;
allow $1 cupsd_rw_etc_t:file { getattr read };
')