[people/stevee/selinux-policy.git] / policy / modules / roles / xguest.if

## <summary>Least privledge xwindows user role</summary>

########################################
## <summary>
##	Change to the xguest role.
## </summary>
## <param name="role">
##	<summary>
##	Role allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`xguest_role_change',`
	gen_require(`
		role xguest_r;
	')

	allow $1 xguest_r;
')

########################################
## <summary>
##	Change from the xguest role.
## </summary>
## <desc>
##	<p>
##	Change from the xguest role to
##	the specified role.
##	</p>
##	<p>
##	This is an interface to support third party modules
##	and its use is not allowed in upstream reference
##	policy.
##	</p>
## </desc>
## <param name="role">
##	<summary>
##	Role allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`xguest_role_change_to',`
	gen_require(`
		role xguest_r;
	')

	allow xguest_r $1;
')
Commit	Line	Data
42d567c3 CP	1	## <summary>Least privledge xwindows user role</summary>
	2
	3	########################################
	4	## <summary>
	5	## Change to the xguest role.
	6	## </summary>
	7	## <param name="role">
	8	## <summary>
3f67f722	9	## Role allowed access.
42d567c3 CP	10	## </summary>
	11	## </param>
	12	## <rolecap/>
	13	#
	14	interface(`xguest_role_change',`
	15	gen_require(`
	16	role xguest_r;
	17	')
	18
	19	allow $1 xguest_r;
	20	')
	21
	22	########################################
	23	## <summary>
	24	## Change from the xguest role.
	25	## </summary>
	26	## <desc>
	27	## <p>
	28	## Change from the xguest role to
	29	## the specified role.
	30	## </p>
	31	## <p>
	32	## This is an interface to support third party modules
	33	## and its use is not allowed in upstream reference
	34	## policy.
	35	## </p>
	36	## </desc>
	37	## <param name="role">
	38	## <summary>
	39	## Role allowed access.
	40	## </summary>
	41	## </param>
	42	## <rolecap/>
	43	#
	44	interface(`xguest_role_change_to',`
	45	gen_require(`
	46	role xguest_r;
	47	')
	48
	49	allow xguest_r $1;
	50	')