]> git.ipfire.org Git - people/stevee/selinux-policy.git/blob - policy/modules/apps/mono.te
ecab36dc9c9d21f478e907a5dca1ca810b2fff67
[people/stevee/selinux-policy.git] / policy / modules / apps / mono.te
1 policy_module(mono, 1.8.0)
2
3 ########################################
4 #
5 # Declarations
6 #
7
8 type mono_t;
9 type mono_exec_t;
10 application_type(mono_t)
11 init_system_domain(mono_t, mono_exec_t)
12
13 ########################################
14 #
15 # Local policy
16 #
17
18 allow mono_t self:process { signal getsched execheap execmem execstack };
19
20 init_dbus_chat_script(mono_t)
21
22 userdom_user_home_dir_filetrans_user_home_content(mono_t, { dir file lnk_file fifo_file sock_file })
23
24 optional_policy(`
25 avahi_dbus_chat(mono_t)
26 ')
27
28 optional_policy(`
29 cups_dbus_chat(mono_t)
30 ')
31
32 optional_policy(`
33 hal_dbus_chat(mono_t)
34 ')
35
36 optional_policy(`
37 networkmanager_dbus_chat(mono_t)
38 ')
39
40 optional_policy(`
41 rpm_dbus_chat(mono_t)
42 ')
43
44 optional_policy(`
45 unconfined_domain(mono_t)
46 unconfined_dbus_chat(mono_t)
47 unconfined_dbus_connect(mono_t)
48 ')
49
50 optional_policy(`
51 xserver_rw_shm(mono_t)
52 ')