9127219358
There is more than 5000 parameter documentations. Only about 300 are differently done. Change them to be consistently indented. param with one space and content inside with one tab This was done with: sed -ri ' /^##[[:space:]]*<param/,/^##[[:space:]]*<[/]param>/{ s/^##[[:space:]]*/##\t/; s/^##[[:space:]]*(<[/]?summary)/##\t\1/; s/^##[[:space:]]*(<[/]?param)/## \1/; }' policy/modules/*/*.if Signed-off-by: Markus Linnala <Markus.Linnala@cybercom.com>
101 lines
2.0 KiB
Plaintext
101 lines
2.0 KiB
Plaintext
## <summary>gpsd monitor daemon.</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run gpsd.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`gpsd_domtrans',`
|
|
gen_require(`
|
|
type gpsd_t, gpsd_exec_t;
|
|
')
|
|
|
|
corecmd_search_bin($1)
|
|
domtrans_pattern($1, gpsd_exec_t, gpsd_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute gpsd in the gpsd domain, and
|
|
## allow the specified role the gpsd domain.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## Role allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`gpsd_run',`
|
|
gen_require(`
|
|
attribute_role gpsd_roles;
|
|
')
|
|
|
|
gpsd_domtrans($1)
|
|
roleattribute $2 gpsd_roles;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read and write gpsd shared memory.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`gpsd_rw_shm',`
|
|
gen_require(`
|
|
type gpsd_t, gpsd_tmpfs_t;
|
|
')
|
|
|
|
allow $1 gpsd_t:shm rw_shm_perms;
|
|
allow $1 gpsd_tmpfs_t:dir list_dir_perms;
|
|
rw_files_pattern($1, gpsd_tmpfs_t, gpsd_tmpfs_t)
|
|
read_lnk_files_pattern($1, gpsd_tmpfs_t, gpsd_tmpfs_t)
|
|
fs_search_tmpfs($1)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to
|
|
## administrate an gpsd environment.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## Role allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`gpsd_admin',`
|
|
gen_require(`
|
|
type gpsd_t, gpsd_initrc_exec_t, gpsd_runtime_t;
|
|
')
|
|
|
|
allow $1 gpsd_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, gpsd_t)
|
|
|
|
init_startstop_service($1, $2, gpsd_t, gpsd_initrc_exec_t)
|
|
|
|
files_search_runtime($1)
|
|
admin_pattern($1, gpsd_runtime_t)
|
|
|
|
gpsd_run($1, $2)
|
|
')
|