| Current Path : /proc/self/root/usr/share/selinux/devel/include/contrib/ |
| Current File : //proc/self/root/usr/share/selinux/devel/include/contrib/rlogin.if |
## <summary>Remote login daemon.</summary> ######################################## ## <summary> ## Execute rlogind in the rlogin domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`rlogin_domtrans',` gen_require(` type rlogind_t, rlogind_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, rlogind_exec_t, rlogind_t) ') ######################################## ## <summary> ## Read rlogin user home content. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`rlogin_read_home_content',` gen_require(` type rlogind_home_t; ') userdom_search_user_home_dirs($1) list_dirs_pattern($1, rlogind_home_t, rlogind_home_t) read_files_pattern($1, rlogind_home_t, rlogind_home_t) read_lnk_files_pattern($1, rlogind_home_t, rlogind_home_t) ') ######################################## ## <summary> ## Create, read, write, and delete ## rlogind home files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`rlogin_manage_rlogind_home_files',` gen_require(` type rlogind_home_t; ') userdom_search_user_home_dirs($1) allow $1 rlogind_home_t:file manage_file_perms; ') ######################################## ## <summary> ## Relabel rlogind home files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`rlogin_relabel_rlogind_home_files',` gen_require(` type rlogind_home_t; ') userdom_search_user_home_dirs($1) allow $1 rlogind_home_t:file relabel_file_perms; ') ######################################## ## <summary> ## Create objects in user home ## directories with the rlogind home type. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <param name="object_class"> ## <summary> ## Class of the object being created. ## </summary> ## </param> ## <param name="name" optional="true"> ## <summary> ## The name of the object being created. ## </summary> ## </param> # interface(`rlogin_home_filetrans_logind_home',` gen_require(` type rlogind_home_t; ') userdom_user_home_dir_filetrans($1, rlogind_home_t, $2, $3) ') ######################################## ## <summary> ## Create, read, write, and delete ## rlogind temporary content. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`rlogin_manage_rlogind_tmp_content',` gen_require(` type rlogind_tmp_t; ') files_search_tmp($1) allow $1 rlogind_tmp_t:dir manage_dir_perms; allow $1 rlogind_tmp_t:file manage_file_perms; ') ######################################## ## <summary> ## Relabel rlogind temporary content. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`rlogin_relabel_rlogind_tmp_content',` gen_require(` type rlogind_tmp_t; ') files_search_tmp($1) allow $1 rlogind_tmp_t:dir relabel_dir_perms; allow $1 rlogind_tmp_t:file relabel_file_perms; ')