selinux-refpolicy/policy/modules/services/consolesetup.if
Russell Coker 3ca0cd59d7 This patch removes deprecated interfaces that were deprecated in the 20210203
release.  I think that 2 years of support for a deprecated interface is
enough and by the time we have the next release out it will probably be more
than 2 years since 20210203.

I think this is ready to merge.

Signed-off-by: Russell Coker <russell@coker.com.au>
2022-12-08 18:35:27 +11:00

105 lines
2.4 KiB
Plaintext

## <summary>console font and keymap setup program for debian</summary>
########################################
## <summary>
## Execute console-setup in the consolesetup domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
interface(`consolesetup_domtrans', `
gen_require(`
type consolesetup_t, consolesetup_exec_t;
')
corecmd_search_bin($1)
domtrans_pattern($1, consolesetup_exec_t, consolesetup_t)
')
########################################
## <summary>
## Read console-setup configuration files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`consolesetup_read_conf',`
gen_require(`
type consolesetup_conf_t;
')
files_search_etc($1)
allow $1 consolesetup_conf_t:dir list_dir_perms;
allow $1 consolesetup_conf_t:file read_file_perms;
allow $1 consolesetup_conf_t:lnk_file read_lnk_file_perms;
')
########################################
## <summary>
## Execute console-setup configuration files
## in the caller domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
interface(`consolesetup_exec_conf', `
gen_require(`
type consolesetup_conf_t;
')
files_search_etc($1)
exec_files_pattern($1, consolesetup_conf_t, consolesetup_conf_t)
')
########################################
## <summary>
## Allow the caller to manage
## consolesetup_runtime_t files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`consolesetup_manage_runtime', `
gen_require(`
type consolesetup_runtime_t;
')
files_search_runtime($1)
manage_dirs_pattern($1, consolesetup_runtime_t, consolesetup_runtime_t)
manage_files_pattern($1, consolesetup_runtime_t, consolesetup_runtime_t)
')
########################################
## <summary>
## Create a console-setup directory in
## the runtime directory.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`consolesetup_runtime_filetrans_runtime_dir', `
gen_require(`
type consolesetup_runtime_t;
')
files_runtime_filetrans($1, consolesetup_runtime_t, dir, "console-setup")
')