doc/example.te

   1
   2 policy_module(myapp,1.0.0)
   3
   4 ########################################
   5 #
   6 # Declarations
   7 #
   8
   9 type myapp_t;
  10 type myapp_exec_t;
  11 domain_type(myapp_t)
  12 domain_entry_file(myapp_t, myapp_exec_t)
  13
  14 type myapp_log_t;
  15 logging_log_file(myapp_log_t)
  16
  17 type myapp_tmp_t;
  18 files_tmp_file(myapp_tmp_t)
  19
  20 ########################################
  21 #
  22 # Myapp local policy
  23 #
  24
  25 allow myapp_t myapp_log_t:file { read_file_perms append_file_perms };
  26
  27 allow myapp_t myapp_tmp_t:file manage_file_perms;
  28 files_tmp_filetrans(myapp_t,myapp_tmp_t,file)