selinux-refpolicy/policy/modules/services/slrnpull.if

43 lines
954 B
Plaintext

## <summary>Service for downloading news feeds the slrn newsreader.</summary>
########################################
## <summary>
## Search slrnpull spool directories.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`slrnpull_search_spool',`
gen_require(`
type slrnpull_spool_t;
')
files_search_spool($1)
allow $1 slrnpull_spool_t:dir search_dir_perms;
')
########################################
## <summary>
## Create, read, write, and delete
## slrnpull spool content.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`slrnpull_manage_spool',`
gen_require(`
type slrnpull_spool_t;
')
files_search_spool($1)
manage_dirs_pattern($1, slrnpull_spool_t, slrnpull_spool_t)
manage_files_pattern($1, slrnpull_spool_t, slrnpull_spool_t)
manage_lnk_files_pattern($1, slrnpull_spool_t, slrnpull_spool_t)
')