[people/stevee/selinux-policy.git] / policy / modules / roles / unprivuser.te

policy_module(unprivuser, 2.1.1)

# this module should be named user, but that is
# a compile error since user is a keyword.

########################################
#
# Declarations
#

role user_r;

userdom_unpriv_user_template(user)

optional_policy(`
	apache_role(user_r, user_t)
')

optional_policy(`
	screen_role_template(user, user_r, user_t)
')

optional_policy(`
	xserver_role(user_r, user_t)
')

ifndef(`distro_redhat',`
	optional_policy(`
		auth_role(user_r, user_t)
	')

	optional_policy(`
		bluetooth_role(user_r, user_t)
	')

	optional_policy(`
		cdrecord_role(user_r, user_t)
	')

	optional_policy(`
		cron_role(user_r, user_t)
	')

	optional_policy(`
		dbus_role_template(user, user_r, user_t)
	')

	optional_policy(`
		evolution_role(user_r, user_t)
	')

	optional_policy(`
		games_role(user_r, user_t)
	')

	optional_policy(`
		gift_role(user_r, user_t)
	')

	optional_policy(`
		gnome_role(user_r, user_t)
	')

	optional_policy(`
		gpg_role(user_r, user_t)
	')

	optional_policy(`
		irc_role(user_r, user_t)
	')

	optional_policy(`
		java_role(user_r, user_t)
	')

	optional_policy(`
		lockdev_role(user_r, user_t)
	')

	optional_policy(`
		lpd_role(user_r, user_t)
	')

	optional_policy(`
		mozilla_role(user_r, user_t)
	')

	optional_policy(`
		mplayer_role(user_r, user_t)
	')

	optional_policy(`
		mta_role(user_r, user_t)
	')

	optional_policy(`
		oident_manage_user_content(user_t)
		oident_relabel_user_content(user_t)
	')

	optional_policy(`
		postgresql_role(user_r, user_t)
	')

	optional_policy(`
		pyzor_role(user_r, user_t)
	')

	optional_policy(`
		razor_role(user_r, user_t)
	')

	optional_policy(`
		rssh_role(user_r, user_t)
	')

	optional_policy(`
	spamassassin_role(user_r, user_t)
	')

	optional_policy(`
		ssh_role_template(user, user_r, user_t)
	')

	optional_policy(`
		su_role_template(user, user_r, user_t)
	')

	optional_policy(`
		sudo_role_template(user, user_r, user_t)
	')

	optional_policy(`
		thunderbird_role(user_r, user_t)
	')

	optional_policy(`
		tvtime_role(user_r, user_t)
	')

	optional_policy(`
		uml_role(user_r, user_t)
	')

	optional_policy(`
		userhelper_role_template(user, user_r, user_t)
	')

	optional_policy(`
		vmware_role(user_r, user_t)
	')

	optional_policy(`
		wireshark_role(user_r, user_t)
	')
')
Commit	Line	Data
08690c84	1	policy_module(unprivuser, 2.1.1)
e9c6cda7 CP	2
	3	# this module should be named user, but that is
	4	# a compile error since user is a keyword.
	5
	6	########################################
	7	#
	8	# Declarations
	9	#
	10
	11	role user_r;
	12
	13	userdom_unpriv_user_template(user)
	14
296273a7 CP	15	optional_policy(`
	16	apache_role(user_r, user_t)
	17	')
	18
	19	optional_policy(`
c87e1502	20	screen_role_template(user, user_r, user_t)
296273a7 CP	21	')
	22
	23	optional_policy(`
c87e1502	24	xserver_role(user_r, user_t)
296273a7 CP	25	')
296273a7 CP	26
c87e1502 JS	27	ifndef(`distro_redhat',`
	28	optional_policy(`
	29	auth_role(user_r, user_t)
	30	')
296273a7	31
c87e1502 JS	32	optional_policy(`
	33	bluetooth_role(user_r, user_t)
	34	')
296273a7	35
c87e1502 JS	36	optional_policy(`
	37	cdrecord_role(user_r, user_t)
	38	')
296273a7	39
c87e1502 JS	40	optional_policy(`
	41	cron_role(user_r, user_t)
	42	')
296273a7	43
c87e1502 JS	44	optional_policy(`
	45	dbus_role_template(user, user_r, user_t)
	46	')
296273a7	47
c87e1502 JS	48	optional_policy(`
	49	evolution_role(user_r, user_t)
	50	')
296273a7	51
c87e1502 JS	52	optional_policy(`
	53	games_role(user_r, user_t)
	54	')
296273a7	55
c87e1502 JS	56	optional_policy(`
	57	gift_role(user_r, user_t)
	58	')
296273a7	59
c87e1502 JS	60	optional_policy(`
	61	gnome_role(user_r, user_t)
	62	')
296273a7	63
c87e1502 JS	64	optional_policy(`
	65	gpg_role(user_r, user_t)
	66	')
296273a7	67
c87e1502 JS	68	optional_policy(`
	69	irc_role(user_r, user_t)
	70	')
296273a7	71
c87e1502 JS	72	optional_policy(`
	73	java_role(user_r, user_t)
	74	')
296273a7	75
c87e1502 JS	76	optional_policy(`
	77	lockdev_role(user_r, user_t)
	78	')
296273a7	79
c87e1502 JS	80	optional_policy(`
	81	lpd_role(user_r, user_t)
	82	')
296273a7	83
c87e1502 JS	84	optional_policy(`
	85	mozilla_role(user_r, user_t)
	86	')
296273a7	87
c87e1502 JS	88	optional_policy(`
	89	mplayer_role(user_r, user_t)
	90	')
296273a7	91
c87e1502 JS	92	optional_policy(`
	93	mta_role(user_r, user_t)
	94	')
22a2874d	95
c87e1502 JS	96	optional_policy(`
	97	oident_manage_user_content(user_t)
	98	oident_relabel_user_content(user_t)
	99	')
296273a7	100
c87e1502 JS	101	optional_policy(`
	102	postgresql_role(user_r, user_t)
	103	')
296273a7	104
c87e1502 JS	105	optional_policy(`
	106	pyzor_role(user_r, user_t)
	107	')
296273a7	108
c87e1502 JS	109	optional_policy(`
	110	razor_role(user_r, user_t)
	111	')
296273a7	112
c87e1502 JS	113	optional_policy(`
	114	rssh_role(user_r, user_t)
	115	')
296273a7	116
c87e1502 JS	117	optional_policy(`
	118	spamassassin_role(user_r, user_t)
	119	')
296273a7	120
c87e1502 JS	121	optional_policy(`
	122	ssh_role_template(user, user_r, user_t)
	123	')
296273a7	124
c87e1502 JS	125	optional_policy(`
	126	su_role_template(user, user_r, user_t)
	127	')
296273a7	128
c87e1502 JS	129	optional_policy(`
	130	sudo_role_template(user, user_r, user_t)
	131	')
296273a7	132
c87e1502 JS	133	optional_policy(`
	134	thunderbird_role(user_r, user_t)
	135	')
296273a7	136
c87e1502 JS	137	optional_policy(`
	138	tvtime_role(user_r, user_t)
	139	')
296273a7	140
c87e1502 JS	141	optional_policy(`
	142	uml_role(user_r, user_t)
	143	')
296273a7	144
c87e1502 JS	145	optional_policy(`
	146	userhelper_role_template(user, user_r, user_t)
	147	')
296273a7	148
c87e1502 JS	149	optional_policy(`
	150	vmware_role(user_r, user_t)
	151	')
296273a7	152
c87e1502 JS	153	optional_policy(`
	154	wireshark_role(user_r, user_t)
	155	')
296273a7	156	')