From 42277d016ca5669e1d16e8a036f702bbb6df5419 Mon Sep 17 00:00:00 2001 From: Dan Walsh Date: Thu, 1 Dec 2011 16:27:15 -0500 Subject: [PATCH] add upstream gpg_exec interface --- policy/modules/apps/gpg.if | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/policy/modules/apps/gpg.if b/policy/modules/apps/gpg.if index 93d212c4..46cc164f 100644 --- a/policy/modules/apps/gpg.if +++ b/policy/modules/apps/gpg.if @@ -86,6 +86,25 @@ interface(`gpg_domtrans',` domtrans_pattern($1, gpg_exec_t, gpg_t) ') +###################################### +## +## Execute gpg in the caller domain. +## +## +## +## Domain allowed access. +## +## +# +interface(`gpg_exec',` + gen_require(` + type gpg_exec_t; + ') + + corecmd_search_bin($1) + can_exec($1, gpg_exec_t) +') + ###################################### ## ## Transition to a gpg web domain. -- 2.47.3