32 lines
463 B
Text
32 lines
463 B
Text
|
policy_module(guest, 1.3.0)
|
||
|
|
|
||
|
|
########################################
|
||
|
|
#
|
||
|
|
# Declarations
|
||
|
|
#
|
||
|
|
|
||
|
|
# role guest_r;
|
||
|
|
|
||
|
|
userdom_restricted_user_template(guest)
|
||
|
|
|
||
|
|
kernel_read_system_state(guest_t)
|
||
|
|
|
||
|
|
########################################
|
||
|
|
#
|
||
|
|
# Local policy
|
||
|
|
#
|
||
|
|
|
||
|
|
optional_policy(`
|
||
|
|
apache_role(guest_r, guest_t)
|
||
|
|
')
|
||
|
|
|
||
|
|
optional_policy(`
|
||
|
|
dbus_dontaudit_chat_system_bus(guest_t)
|
||
|
|
')
|
||
|
|
|
||
|
|
optional_policy(`
|
||
|
|
systemd_dontaudit_dbus_chat(guest_t)
|
||
|
|
')
|
||
|
|
|
||
|
|
# gen_user(guest_u, user, guest_r, s0, s0)
|