Oreon-Lime-R2/selinux-policy/selinux-policy-d9f4a2b/selinux-policy-d9f4a2bbeb91fd95d0c35a90936efb9ea99d2455/policy/modules/contrib/timedatex.if

62 lines
1.2 KiB
Text
Raw Normal View History

## <summary>timedatex - D-Bus service for system clock and RTC settings</summary>
########################################
## <summary>
## Execute timedatex_exec_t in the timedatex domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
interface(`timedatex_domtrans',`
gen_require(`
type timedatex_t, timedatex_exec_t;
')
corecmd_search_bin($1)
domtrans_pattern($1, timedatex_exec_t, timedatex_t)
')
########################################
## <summary>
## Send and receive messages from
## timedatex over dbus.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`timedatex_dbus_chat',`
gen_require(`
type timedatex_t;
class dbus send_msg;
')
allow $1 timedatex_t:dbus send_msg;
allow timedatex_t $1:dbus send_msg;
')
######################################
## <summary>
## Execute timedatex in the caller domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`timedatex_exec',`
gen_require(`
type timedatex_exec_t;
')
corecmd_search_bin($1)
can_exec($1, timedatex_exec_t)
')