9127219358
There is more than 5000 parameter documentations. Only about 300 are
differently done. Change them to be consistently indented.
param with one space
and content inside with one tab
This was done with:
sed -ri '
/^##[[:space:]]*<param/,/^##[[:space:]]*<[/]param>/{
s/^##[[:space:]]*/##\t/;
s/^##[[:space:]]*(<[/]?summary)/##\t\1/;
s/^##[[:space:]]*(<[/]?param)/## \1/;
}' policy/modules/*/*.if
Signed-off-by: Markus Linnala <Markus.Linnala@cybercom.com>
143 lines
2.8 KiB
Plaintext
143 lines
2.8 KiB
Plaintext
## <summary>Service for handling smart card readers.</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Send null signals to openct.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`openct_signull',`
|
|
gen_require(`
|
|
type openct_t;
|
|
')
|
|
|
|
allow $1 openct_t:process signull;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute openct in the caller domain.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`openct_exec',`
|
|
gen_require(`
|
|
type openct_exec_t;
|
|
')
|
|
|
|
corecmd_search_bin($1)
|
|
can_exec($1, openct_exec_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run openct.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`openct_domtrans',`
|
|
gen_require(`
|
|
type openct_t, openct_exec_t;
|
|
')
|
|
|
|
corecmd_search_bin($1)
|
|
domtrans_pattern($1, openct_exec_t, openct_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read openct pid files. (Deprecated)
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`openct_read_pid_files',`
|
|
refpolicywarn(`$0($*) has been deprecated, please use openct_read_runtime_files() instead.')
|
|
openct_read_runtime_files($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read openct runtime files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`openct_read_runtime_files',`
|
|
gen_require(`
|
|
type openct_runtime_t;
|
|
')
|
|
|
|
files_search_runtime($1)
|
|
read_files_pattern($1, openct_runtime_t, openct_runtime_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Connect to openct over an unix
|
|
## domain stream socket.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`openct_stream_connect',`
|
|
gen_require(`
|
|
type openct_t, openct_runtime_t;
|
|
')
|
|
|
|
files_search_runtime($1)
|
|
stream_connect_pattern($1, openct_runtime_t, openct_runtime_t, openct_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to
|
|
## administrate an openct environment.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## Role allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`openct_admin',`
|
|
gen_require(`
|
|
type openct_t, openct_initrc_exec_t, openct_runtime_t;
|
|
')
|
|
|
|
allow $1 openct_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, openct_t)
|
|
|
|
init_startstop_service($1, $2, openct_t, openct_initrc_exec_t)
|
|
|
|
files_search_runtime($1)
|
|
admin_pattern($1, openct_runtime_t)
|
|
')
|