policy/modules/services/xfs.if

   1 ## <summary>X Windows Font Server </summary>
   2
   3 ########################################
   4 ## <summary>
   5 ##      Read a X font server named socket.
   6 ## </summary>
   7 ## <param name="domain">
   8 ##      <summary>
   9 ##      Domain allowed access.
  10 ##      </summary>
  11 ## </param>
  12 #
  13 interface(`xfs_read_sockets',`
  14         gen_require(`
  15                 type xfs_tmp_t;
  16         ')
  17
  18         files_search_tmp($1)
  19         read_sock_files_pattern($1, xfs_tmp_t, xfs_tmp_t)
  20 ')
  21
  22 ########################################
  23 ## <summary>
  24 ##      Connect to a X font server over
  25 ##      a unix domain stream socket.
  26 ## </summary>
  27 ## <param name="domain">
  28 ##      <summary>
  29 ##      Domain allowed access.
  30 ##      </summary>
  31 ## </param>
  32 #
  33 interface(`xfs_stream_connect',`
  34         gen_require(`
  35                 type xfs_tmp_t, xfs_t;
  36         ')
  37
  38         files_search_tmp($1)
  39         stream_connect_pattern($1, xfs_tmp_t, xfs_tmp_t, xfs_t)
  40 ')
  41
  42 ########################################
  43 ## <summary>
  44 ##      Allow the specified domain to execute xfs
  45 ##      in the caller domain.
  46 ## </summary>
  47 ## <param name="domain">
  48 ##      <summary>
  49 ##      Domain allowed access.
  50 ##      </summary>
  51 ## </param>
  52 #
  53 interface(`xfs_exec',`
  54         gen_require(`
  55                 type xfs_exec_t;
  56         ')
  57
  58         can_exec($1, xfs_exec_t)
  59 ')