ó
m‰ÌVc @ s. d Z d Z d Z d Z d Z d Z d Z d S( s=
type TEMPLATETYPE_tmp_t;
files_tmp_file(TEMPLATETYPE_tmp_t)
s:
manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
files_tmp_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, { dir file lnk_file })
s–
manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
files_tmp_filetrans(TEMPLATETYPE_t, TEMPLATETYPE_tmp_t, sock_file)
sã
########################################
##
## Do not audit attempts to read,
## TEMPLATETYPE tmp files
##
##
##
## Domain to not audit.
##
##
#
interface(`TEMPLATETYPE_dontaudit_read_tmp_files',`
gen_require(`
type TEMPLATETYPE_tmp_t;
')
dontaudit $1 TEMPLATETYPE_tmp_t:file read_file_perms;
')
########################################
##
## Read TEMPLATETYPE tmp files
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_read_tmp_files',`
gen_require(`
type TEMPLATETYPE_tmp_t;
')
files_search_tmp($1)
read_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
')
########################################
##
## Manage TEMPLATETYPE tmp files
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_manage_tmp',`
gen_require(`
type TEMPLATETYPE_tmp_t;
')
files_search_tmp($1)
manage_dirs_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
manage_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
manage_lnk_files_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t)
')
s ########################################
##
## Connect to TEMPLATETYPE over a unix stream socket.
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_stream_connect',`
gen_require(`
type TEMPLATETYPE_t, TEMPLATETYPE_tmp_t;
')
files_search_pids($1)
stream_connect_pattern($1, TEMPLATETYPE_tmp_t, TEMPLATETYPE_tmp_t, TEMPLATETYPE_t)
')
s
type TEMPLATETYPE_tmp_t;s>
files_search_tmp($1)
admin_pattern($1, TEMPLATETYPE_tmp_t)
N( t te_typest te_rulest te_stream_rulest if_rulest if_stream_rulest if_admin_typest if_admin_rules( ( ( s< /usr/lib64/python2.7/site-packages/sepolicy/templates/tmp.pyt s =