selinux-refpolicy/policy/modules/apps
Sven Vermeulen 3274da931e Introduce gpg_exec interface
Some applications might want to execute gpg without requiring a
transition. A possible use case is to allow applications to validate
signatures (made by GnuPG). As long as the application doesn't need to
generate signatures itself and its trustdb is not marked as
gpg_secret_t, it suffices to grant it gpg_exec().

Note that it does require the application to have read/write rights in
the directory where the trustdb is stored (as gpg tries to generate lock
files where the trustdb file is located).

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
2011-09-06 13:22:59 -04:00
..
ada.fc trunk: merge strict and targeted policies. merge shlib_t into lib_t. 2007-10-02 16:04:50 +00:00
ada.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
ada.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
authbind.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
authbind.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
authbind.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
awstats.fc trunk: add awstats from Stefan Schulze Frielinghaus. 2007-09-17 17:25:40 +00:00
awstats.if trunk: whitespace fixes in xml blocks. 2008-12-03 19:16:20 +00:00
awstats.te Module version bump for release. 2011-07-26 08:11:01 -04:00
calamaris.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
calamaris.if trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00
calamaris.te Module version bump for release. 2011-07-26 08:11:01 -04:00
cdrecord.fc three debian patches from manoj 2009-07-14 09:05:59 -04:00
cdrecord.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
cdrecord.te Module version bump for release. 2011-07-26 08:11:01 -04:00
cpufreqselector.fc add cpufreqselector from dan 2009-07-27 09:09:00 -04:00
cpufreqselector.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
cpufreqselector.te Module version bump for release. 2011-07-26 08:11:01 -04:00
evolution.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
evolution.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
evolution.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
games.fc trunk: 7 patches from dan, slocate, games, amavis, radius, sendmail, rshd, logrotate. 2007-08-27 17:57:36 +00:00
games.if trunk: 4 patches from dan. 2009-03-11 13:32:23 +00:00
games.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
gift.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
gift.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
gift.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
gitosis.fc gitosis patch from Dan Walsh 2010-06-29 11:25:37 -04:00
gitosis.if gitosis patch from Dan Walsh 2010-06-29 11:25:37 -04:00
gitosis.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
gnome.fc Part of gnome patch from Dan Walsh. 2010-08-12 09:21:36 -04:00
gnome.if Part of gnome patch from Dan Walsh. 2010-08-12 09:21:36 -04:00
gnome.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
gpg.fc gpg patch from dan 2009-07-21 10:07:38 -04:00
gpg.if Introduce gpg_exec interface 2011-09-06 13:22:59 -04:00
gpg.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
irc.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
irc.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
irc.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
java.fc Java patch from Dan Walsh. 2010-05-14 10:40:59 -04:00
java.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
java.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
kdumpgui.fc Additional kdumpgui cleanup. 2010-08-10 09:21:01 -04:00
kdumpgui.if Policy for system-config-kdump gui from Dan Walsh 2010-08-10 09:05:43 -04:00
kdumpgui.te Module version bump for release. 2011-07-26 08:11:01 -04:00
livecd.fc Add livecd from Dan Walsh. 2010-07-07 10:28:25 -04:00
livecd.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
livecd.te Module version bump for release. 2011-07-26 08:11:01 -04:00
loadkeys.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
loadkeys.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
loadkeys.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
lockdev.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
lockdev.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
lockdev.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
metadata.xml remove extra level of directory 2006-07-12 20:32:27 +00:00
mono.fc Mono patch from Dan Walsh. 2010-02-19 10:42:43 -05:00
mono.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
mono.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
mozilla.fc Mozilla patch from Dan Walsh. 2010-06-21 09:36:39 -04:00
mozilla.if Fix the call to mozilla_run_plugin. 2011-06-24 08:58:48 -04:00
mozilla.te Module version bump for release. 2011-07-26 08:11:01 -04:00
mplayer.fc trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
mplayer.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
mplayer.te Module version bump for release. 2011-07-26 08:11:01 -04:00
podsleuth.fc podsleuth patch from dan. 2009-07-21 10:11:16 -04:00
podsleuth.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
podsleuth.te Module version bump for release. 2011-07-26 08:11:01 -04:00
ptchown.fc add ptchown policy from dan. 2009-08-31 10:21:01 -04:00
ptchown.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
ptchown.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
pulseaudio.fc Tweaks on pulseaudio 1868383, ksmtuned d279dd6, and smokeping f3c346c. 2010-03-29 09:19:40 -04:00
pulseaudio.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
pulseaudio.te Module version bump for release. 2011-07-26 08:11:01 -04:00
qemu.fc Qemu patch from Dan Walsh. 2010-06-22 09:32:35 -04:00
qemu.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
qemu.te Module version bump for release. 2011-07-26 08:11:01 -04:00
rssh.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
rssh.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
rssh.te Module version bump for release. 2011-07-26 08:11:01 -04:00
sambagui.fc system-config-samba dbus service policy from Dan Walsh 2010-08-09 09:37:29 -04:00
sambagui.if system-config-samba dbus service policy from Dan Walsh 2010-08-09 09:37:29 -04:00
sambagui.te Module version bump for release. 2011-07-26 08:11:01 -04:00
screen.fc Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
screen.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
screen.te Module version bump for release. 2011-07-26 08:11:01 -04:00
seunshare.fc add seunshare from dan. 2009-09-28 15:40:06 -04:00
seunshare.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
seunshare.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
slocate.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
slocate.if trunk: whitespace fixes 2009-06-26 14:40:13 +00:00
slocate.te Module version bump for release. 2011-07-26 08:11:01 -04:00
telepathy.fc Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
telepathy.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
telepathy.te Module version bump for release. 2011-07-26 08:11:01 -04:00
thunderbird.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
thunderbird.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
thunderbird.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
tvtime.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
tvtime.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
tvtime.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
uml.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
uml.if trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
uml.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
userhelper.fc patch to fix escaping of . in file contexts from james athey 2006-07-24 15:43:57 +00:00
userhelper.if Interface documentation standardization patch from Dan Walsh. 2010-08-02 09:22:09 -04:00
userhelper.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
usernetctl.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
usernetctl.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
usernetctl.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
vlock.fc Adding support for the vlock program. 2010-11-01 10:43:33 -04:00
vlock.if Rename vlock interfaces. 2010-11-01 11:22:07 -04:00
vlock.te Module version bump for release. 2011-07-26 08:11:01 -04:00
vmware.fc Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
vmware.if VMWare patch from Dan Walsh. 2010-07-08 13:43:50 -04:00
vmware.te Module version bump for release. 2011-07-26 08:11:01 -04:00
webalizer.fc remove extra level of directory 2006-07-12 20:32:27 +00:00
webalizer.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
webalizer.te Module version bump for release. 2011-07-26 08:11:01 -04:00
wine.fc Wine patch from Dan Walsh. 2010-02-19 09:17:51 -05:00
wine.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
wine.te Module version bump for release. 2011-07-26 08:11:01 -04:00
wireshark.fc trunk: merge UBAC. 2008-11-05 16:10:46 +00:00
wireshark.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
wireshark.te Bump module versions for release. 2010-12-13 09:12:22 -05:00
wm.fc Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
wm.if Merge various apps layer changes from the Fedora policy. 2011-06-08 13:05:34 -04:00
wm.te Module version bump for release. 2011-07-26 08:11:01 -04:00
xscreensaver.fc clean up xscreensaver. 2009-09-15 09:41:42 -04:00
xscreensaver.if clean up xscreensaver. 2009-09-15 09:41:42 -04:00
xscreensaver.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00
yam.fc patch to fix escaping of . in file contexts from james athey 2006-07-24 15:43:57 +00:00
yam.if apps: domain { allowed to transition, allowed access, to not audit }. 2010-08-05 08:20:59 -04:00
yam.te Whitespace change: drop unnecessary blank line at the start of .te files. 2010-06-10 08:16:35 -04:00