1 policy_module(q3a, 0.1.25)
3 # File context for the executable process
13 _sky_files_use_tmp(q3a_t, q3a_tmp_t)
15 init_domain(q3a_t, q3a_exec_t)
16 init_daemon_domain(q3a_t, q3a_exec_t)
18 corenet_udp_sendrecv_generic_port(q3a_t)
19 corenet_udp_bind_generic_port(q3a_t)
20 corenet_udp_bind_generic_node(q3a_t)
22 read_files_pattern(q3a_t, q3a_ro_t, q3a_ro_t)
23 list_dirs_pattern(q3a_t, q3a_ro_t, q3a_ro_t)
25 allow q3a_t q3a_ro_t:dir list_dir_perms;
26 allow q3a_t q3a_ro_t:file read_file_perms;
28 manage_files_pattern(q3a_t, q3a_rw_t, q3a_rw_t)
29 manage_dirs_pattern(q3a_t, q3a_rw_t, q3a_rw_t)
30 setattr_files_pattern(q3a_t, q3a_rw_t, q3a_rw_t)
32 sysnet_dns_name_resolve(q3a_t)
36 allow q3a_t self:process execmem;