9127219358
There is more than 5000 parameter documentations. Only about 300 are
differently done. Change them to be consistently indented.
param with one space
and content inside with one tab
This was done with:
sed -ri '
/^##[[:space:]]*<param/,/^##[[:space:]]*<[/]param>/{
s/^##[[:space:]]*/##\t/;
s/^##[[:space:]]*(<[/]?summary)/##\t\1/;
s/^##[[:space:]]*(<[/]?param)/## \1/;
}' policy/modules/*/*.if
Signed-off-by: Markus Linnala <Markus.Linnala@cybercom.com>
168 lines
3.4 KiB
Plaintext
168 lines
3.4 KiB
Plaintext
## <summary>Certificate status monitor and PKI enrollment client.</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run certmonger.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`certmonger_domtrans',`
|
|
gen_require(`
|
|
type certmonger_t, certmonger_exec_t;
|
|
')
|
|
|
|
corecmd_search_bin($1)
|
|
domtrans_pattern($1, certmonger_exec_t, certmonger_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Send and receive messages from
|
|
## certmonger over dbus.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`certmonger_dbus_chat',`
|
|
gen_require(`
|
|
type certmonger_t;
|
|
class dbus send_msg;
|
|
')
|
|
|
|
allow $1 certmonger_t:dbus send_msg;
|
|
allow certmonger_t $1:dbus send_msg;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute certmonger server in
|
|
## the certmonger domain.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`certmonger_initrc_domtrans',`
|
|
gen_require(`
|
|
type certmonger_initrc_exec_t;
|
|
')
|
|
|
|
init_labeled_script_domtrans($1, certmonger_initrc_exec_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read certmonger PID files. (Deprecated)
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`certmonger_read_pid_files',`
|
|
refpolicywarn(`$0($*) has been deprecated.')
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Search certmonger lib directories.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`certmonger_search_lib',`
|
|
gen_require(`
|
|
type certmonger_var_lib_t;
|
|
')
|
|
|
|
allow $1 certmonger_var_lib_t:dir search_dir_perms;
|
|
files_search_var_lib($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read certmonger lib files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`certmonger_read_lib_files',`
|
|
gen_require(`
|
|
type certmonger_var_lib_t;
|
|
')
|
|
|
|
files_search_var_lib($1)
|
|
read_files_pattern($1, certmonger_var_lib_t, certmonger_var_lib_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Create, read, write, and delete
|
|
## certmonger lib files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`certmonger_manage_lib_files',`
|
|
gen_require(`
|
|
type certmonger_var_lib_t;
|
|
')
|
|
|
|
files_search_var_lib($1)
|
|
manage_files_pattern($1, certmonger_var_lib_t, certmonger_var_lib_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to
|
|
## administrate an certmonger environment.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## Role allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`certmonger_admin',`
|
|
gen_require(`
|
|
type certmonger_t, certmonger_initrc_exec_t;
|
|
type certmonger_var_lib_t, certmonger_runtime_t;
|
|
')
|
|
|
|
ps_process_pattern($1, certmonger_t)
|
|
allow $1 certmonger_t:process { ptrace signal_perms };
|
|
|
|
init_startstop_service($1, $2, certmonger_t, certmonger_initrc_exec_t)
|
|
|
|
files_search_var_lib($1)
|
|
admin_pattern($1, certmonger_var_lib_t)
|
|
|
|
files_search_runtime($1)
|
|
admin_pattern($1, certmonger_runtime_t)
|
|
')
|