trunk: Database userspace object manager classes from KaiGai Kohei.

[people/stevee/selinux-policy.git] / policy / modules / kernel / mls.if

diff --git a/policy/modules/kernel/mls.if b/policy/modules/kernel/mls.if
index 769ef1fafbdf88a306c1858bc8d5edf1e6b4d757..6606745ce0fd859c56946b8beffabaf8a219cf29 100644 (file)
--- a/policy/modules/kernel/mls.if
+++ b/policy/modules/kernel/mls.if
@@ -491,3 +491,79 @@ interface(`mls_context_translate_all_levels',`
 
        typeattribute $1 mlstranslate;
 ')
+
+########################################
+## <summary>
+##      Make specified domain MLS trusted
+##      for reading from databases at any level.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`mls_db_read_all_levels',`
+       gen_require(`
+               attribute mlsdbread;
+       ')
+
+       typeattribute $1 mlsdbread;
+')
+
+########################################
+## <summary>
+##       Make specified domain MLS trusted
+##       for writing to databases at any level.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`mls_db_write_all_levels',`
+       gen_require(`
+               attribute mlsdbwrite;
+       ')
+
+       typeattribute $1 mlsdbwrite;
+')
+
+########################################
+## <summary>
+##      Make specified domain MLS trusted
+##      for raising the level of databases.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`mls_db_upgrade',`
+       gen_require(`
+               attribute mlsdbupgrade;
+       ')
+
+       typeattribute $1 mlsdbupgrade;
+')
+
+########################################
+## <summary>
+##      Make specified domain MLS trusted
+##      for lowering the level of databases.
+## </summary>
+## <param name="domain">
+##      <summary>
+##      Domain allowed access.
+##      </summary>
+## </param>
+#
+interface(`mls_db_downgrade',`
+       gen_require(`
+               attribute mlsdbdowngrade;
+       ')
+
+       typeattribute $1 mlsdbdowngrade;
+')