selinux-refpolicy/policy/modules/apps/syncthing.if

32 lines
868 B
Plaintext

## <summary>Application that lets you synchronize your files across multiple devices.</summary>
########################################
## <summary>
## Role access for Syncthing
## </summary>
## <param name="role">
## <summary>
## Role allowed access
## </summary>
## </param>
## <param name="domain">
## <summary>
## User domain for the role
## </summary>
## </param>
#
interface(`syncthing_role', `
gen_require(`
attribute_role syncthing_roles;
type syncthing_t, syncthing_exec_t, syncthing_xdg_config_t;
')
roleattribute $1 syncthing_roles;
domtrans_pattern($2, syncthing_exec_t, syncthing_t)
allow $2 syncthing_xdg_config_t:file { manage_file_perms relabel_file_perms };
allow $2 syncthing_xdg_config_t:dir { manage_dir_perms relabel_dir_perms };
allow $2 syncthing_xdg_config_t:lnk_file { manage_lnk_file_perms relabel_lnk_file_perms };
')