projects / people / stevee / selinux-policy.git / blame
| Commit | Line | Data |
|---|---|---|
| 2d102f84 | 1 | ## <summary>X Windows Font Server</summary> |
| 3f41889d CP |
2 | |
| 3 | ######################################## | |
| 4 | ## <summary> | |
| 5 | ## Read a X font server named socket. | |
| 6 | ## </summary> | |
| 7 | ## <param name="domain"> | |
| 885b83ec | 8 | ## <summary> |
| 3f41889d | 9 | ## Domain allowed access. |
| 885b83ec | 10 | ## </summary> |
| 3f41889d CP |
11 | ## </param> |
| 12 | # | |
| 1815bad1 | 13 | interface(`xfs_read_sockets',` |
| 3f41889d CP |
14 | gen_require(` |
| 15 | type xfs_tmp_t; | |
| 16 | ') | |
| 17 | ||
| 18 | files_search_tmp($1) | |
| 0bfccda4 | 19 | read_sock_files_pattern($1, xfs_tmp_t, xfs_tmp_t) |
| 3f41889d | 20 | ') |
| 0f5d13fe CP |
21 | |
| 22 | ######################################## | |
| 23 | ## <summary> | |
| 24 | ## Connect to a X font server over | |
| 25 | ## a unix domain stream socket. | |
| 26 | ## </summary> | |
| 27 | ## <param name="domain"> | |
| 885b83ec | 28 | ## <summary> |
| 0f5d13fe | 29 | ## Domain allowed access. |
| 885b83ec | 30 | ## </summary> |
| 0f5d13fe CP |
31 | ## </param> |
| 32 | # | |
| 33 | interface(`xfs_stream_connect',` | |
| 34 | gen_require(` | |
| 35 | type xfs_tmp_t, xfs_t; | |
| 36 | ') | |
| 37 | ||
| 38 | files_search_tmp($1) | |
| 0bfccda4 | 39 | stream_connect_pattern($1, xfs_tmp_t, xfs_tmp_t, xfs_t) |
| 0f5d13fe | 40 | ') |
| 87eb5c84 | 41 | |
| 87eb5c84 CP |
42 | ######################################## |
| 43 | ## <summary> | |
| 44 | ## Allow the specified domain to execute xfs | |
| 45 | ## in the caller domain. | |
| 46 | ## </summary> | |
| 47 | ## <param name="domain"> | |
| 48 | ## <summary> | |
| 49 | ## Domain allowed access. | |
| 50 | ## </summary> | |
| 51 | ## </param> | |
| 52 | # | |
| 53 | interface(`xfs_exec',` | |
| 54 | gen_require(` | |
| 55 | type xfs_exec_t; | |
| 56 | ') | |
| 57 | ||
| 0bfccda4 | 58 | can_exec($1, xfs_exec_t) |
| 87eb5c84 | 59 | ') |