X-Git-Url: https://git.camperquake.de/gitweb.cgi?a=blobdiff_plain;f=tesseract%2Ftesseract.te;h=9a7d54c04a37badc3ab79452f43669ba16a550f0;hb=HEAD;hp=1de962f44651f9e3c55580c37175c38be8712190;hpb=0e7657673c0fa43bd215b837243fac43800ed723;p=selinux.git

diff --git a/tesseract/tesseract.te b/tesseract/tesseract.te
index 1de962f..9a7d54c 100644
--- a/tesseract/tesseract.te
+++ b/tesseract/tesseract.te
@@ -1,4 +1,4 @@
-policy_module(tesseract, 0.1.0)
+policy_module(tesseract, 0.1.5)
 
 # File context for the executable process
 type tesseract_t;
@@ -10,23 +10,14 @@ files_type(tesseract_rw_t)
 type tesseract_ro_t;
 files_type(tesseract_ro_t)
 
-#type tesseract_tmp_t;
-#files_tmp_file(tesseract_tmp_t)
-
+init_domain(tesseract_t, tesseract_exec_t)
 init_daemon_domain(tesseract_t, tesseract_exec_t)
 
 corenet_udp_sendrecv_generic_port(tesseract_t)
 corenet_udp_bind_generic_port(tesseract_t)
 corenet_udp_bind_generic_node(tesseract_t)
 
-allow tesseract_t tesseract_ro_t:dir list_dir_perms;
-allow tesseract_t tesseract_ro_t:file read_file_perms;
-#allow tesseract_t tesseract_tmp_t:file manage_file_perms;
-#allow tesseract_t tesseract_tmp_t:dir manage_dir_perms;
-
-#manage_files_pattern(tesseract_t, tesseract_rw_t, tesseract_rw_t)
-#manage_dirs_pattern(tesseract_t, tesseract_rw_t, tesseract_rw_t)
-#setattr_files_pattern(tesseract_t, tesseract_rw_t, tesseract_rw_t)
+read_files_pattern(tesseract_t, tesseract_ro_t, tesseract_ro_t)
+list_dirs_pattern(tesseract_t, tesseract_ro_t, tesseract_ro_t)
 
 sysnet_dns_name_resolve(tesseract_t)
-#files_tmp_filetrans(tesseract_t, tesseract_tmp_t, { file dir})