diff options
Diffstat (limited to 'policy/modules/contrib/links.te')
| -rw-r--r-- | policy/modules/contrib/links.te | 67 |
1 files changed, 67 insertions, 0 deletions
diff --git a/policy/modules/contrib/links.te b/policy/modules/contrib/links.te new file mode 100644 index 00000000..a36703f2 --- /dev/null +++ b/policy/modules/contrib/links.te @@ -0,0 +1,67 @@ +policy_module(links, 1.0.0) + +############################ +# +# Declarations +# + +## <desc> +## <p> +## Allow links to manage files in users home directories (download files) +## </p> +## </desc> +gen_tunable(links_manage_user_files, false) + +type links_t; +type links_exec_t; +userdom_user_application_domain(links_t, links_exec_t) + +type links_home_t; +userdom_user_home_content(links_home_t) + +type links_tmpfs_t; +userdom_user_tmpfs_file(links_tmpfs_t) + +############################ +# +# Policy +# + +allow links_t self:process signal_perms; +allow links_t self:unix_stream_socket create_stream_socket_perms; + +manage_dirs_pattern(links_t, links_home_t, links_home_t) +manage_files_pattern(links_t, links_home_t, links_home_t) +manage_lnk_files_pattern(links_t, links_home_t, links_home_t) +manage_sock_files_pattern(links_t, links_home_t, links_home_t) +manage_fifo_files_pattern(links_t, links_home_t, links_home_t) +userdom_user_home_dir_filetrans(links_t, links_home_t, dir) + +manage_fifo_files_pattern(links_t, links_t, links_t) + +manage_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t) +manage_lnk_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t) +manage_fifo_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t) +manage_sock_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t) +fs_tmpfs_filetrans(links_t, links_tmpfs_t, { file lnk_file sock_file fifo_file }) + + +domain_use_interactive_fds(links_t) + +auth_use_nsswitch(links_t) + +userdom_use_user_terminals(links_t) + +corenet_tcp_connect_http_port(links_t) + +miscfiles_read_localization(links_t) + +tunable_policy(`links_manage_user_files',` + userdom_manage_user_home_content_dirs(links_t) + userdom_manage_user_home_content_files(links_t) +') + + +optional_policy(` + xserver_user_x_domain_template(links, links_t, links_tmpfs_t) +') |