## policy for fdo ######################################## ## ## Execute fdo_exec_t in the fdo domain. ## ## ## ## Domain allowed to transition. ## ## # interface(`fdo_domtrans',` gen_require(` type fdo_t, fdo_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, fdo_exec_t, fdo_t) ') ###################################### ## ## Execute fdo in the caller domain. ## ## ## ## Domain allowed access. ## ## # interface(`fdo_exec',` gen_require(` type fdo_exec_t; ') corecmd_search_bin($1) can_exec($1, fdo_exec_t) ')