|
Michael Thomas |
eeaa625 |
## <summary>policy for xpilot-ng</summary>
|
|
Michael Thomas |
eeaa625 |
|
|
Michael Thomas |
eeaa625 |
########################################
|
|
Michael Thomas |
eeaa625 |
## <summary>
|
|
Michael Thomas |
eeaa625 |
## Execute a domain transition to run xpilot-ng-server.
|
|
Michael Thomas |
eeaa625 |
## </summary>
|
|
Michael Thomas |
eeaa625 |
## <param name="domain">
|
|
Michael Thomas |
eeaa625 |
## <summary>
|
|
Michael Thomas |
eeaa625 |
## Domain allowed to transition.
|
|
Michael Thomas |
eeaa625 |
## </summary>
|
|
Michael Thomas |
eeaa625 |
## </param>
|
|
Michael Thomas |
eeaa625 |
#
|
|
Michael Thomas |
eeaa625 |
interface(`xpilotd_domtrans',`
|
|
Michael Thomas |
eeaa625 |
gen_require(`
|
|
Michael Thomas |
eeaa625 |
type xpilotd_t, xpilotd_exec_t;
|
|
Michael Thomas |
eeaa625 |
')
|
|
Michael Thomas |
eeaa625 |
|
|
Michael Thomas |
eeaa625 |
domain_auto_trans($1,xpilotd_exec_t,xpilotd_t)
|
|
Michael Thomas |
eeaa625 |
|
|
Michael Thomas |
eeaa625 |
allow $1 xpilotd_t:fd use;
|
|
Michael Thomas |
eeaa625 |
allow xpilotd_t $1:fd use;
|
|
Michael Thomas |
eeaa625 |
allow xpilotd_t $1:fifo_file rw_file_perms;
|
|
Michael Thomas |
eeaa625 |
allow xpilotd_t $1:process sigchld;
|
|
Michael Thomas |
eeaa625 |
')
|