selinux-refpolicy/policy/modules/services/ddclient.if
Markus Linnala 9127219358 policy: interfaces: doc: indent param blocks consistently
There is more than 5000 parameter documentations. Only about 300 are
differently done. Change them to be consistently indented.

param with one space
and content inside with one tab

This was done with:

sed -ri '
/^##[[:space:]]*<param/,/^##[[:space:]]*<[/]param>/{
	s/^##[[:space:]]*/##\t/;
	s/^##[[:space:]]*(<[/]?summary)/##\t\1/;
	s/^##[[:space:]]*(<[/]?param)/## \1/;
}' policy/modules/*/*.if

Signed-off-by: Markus Linnala <Markus.Linnala@cybercom.com>
2021-07-02 12:19:25 +03:00

96 lines
2.0 KiB
Plaintext

## <summary>Update dynamic IP address at DynDNS.org.</summary>
#######################################
## <summary>
## Execute ddclient in the ddclient domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
interface(`ddclient_domtrans',`
gen_require(`
type ddclient_t, ddclient_exec_t;
')
corecmd_search_bin($1)
domtrans_pattern($1, ddclient_exec_t, ddclient_t)
')
########################################
## <summary>
## Execute ddclient in the ddclient
## domain, and allow the specified
## role the ddclient domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
## <summary>
## Role allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`ddclient_run',`
gen_require(`
attribute_role ddclient_roles;
')
ddclient_domtrans($1)
roleattribute $2 ddclient_roles;
')
########################################
## <summary>
## All of the rules required to
## administrate an ddclient environment.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
## <param name="role">
## <summary>
## Role allowed access.
## </summary>
## </param>
## <rolecap/>
#
interface(`ddclient_admin',`
gen_require(`
type ddclient_t, ddclient_etc_t, ddclient_log_t;
type ddclient_var_t, ddclient_var_lib_t, ddclient_tmp_t;
type ddclient_runtime_t, ddclient_initrc_exec_t;
')
allow $1 ddclient_t:process { ptrace signal_perms };
ps_process_pattern($1, ddclient_t)
init_startstop_service($1, $2, ddclient_t, ddclient_initrc_exec_t)
files_list_etc($1)
admin_pattern($1, ddclient_etc_t)
logging_list_logs($1)
admin_pattern($1, ddclient_log_t)
files_list_var($1)
admin_pattern($1, ddclient_var_t)
files_list_var_lib($1)
admin_pattern($1, ddclient_var_lib_t)
files_list_runtime($1)
admin_pattern($1, ddclient_runtime_t)
files_list_tmp($1)
admin_pattern($1, ddclient_tmp_t)
')