q3a/q3a.te

   1 policy_module(q3a, 0.1.26)
   2
   3 require {
   4     type games_data_t;
   5 }
   6
   7 # File context for the executable process
   8 type q3a_t;
   9 type q3a_exec_t;
  10
  11 type q3a_rw_t;
  12 files_type(q3a_rw_t)
  13
  14 type q3a_ro_t;
  15 files_type(q3a_ro_t)
  16
  17 _sky_files_use_tmp(q3a_t, q3a_tmp_t)
  18
  19 init_domain(q3a_t, q3a_exec_t)
  20 init_daemon_domain(q3a_t, q3a_exec_t)
  21
  22 corenet_udp_sendrecv_generic_port(q3a_t)
  23 corenet_udp_bind_generic_port(q3a_t)
  24 corenet_udp_bind_generic_node(q3a_t)
  25
  26 read_files_pattern(q3a_t, q3a_ro_t, q3a_ro_t)
  27 list_dirs_pattern(q3a_t, q3a_ro_t, q3a_ro_t)
  28
  29 allow q3a_t q3a_ro_t:dir list_dir_perms;
  30 allow q3a_t q3a_ro_t:file read_file_perms;
  31
  32 manage_files_pattern(q3a_t, q3a_rw_t, q3a_rw_t)
  33 manage_dirs_pattern(q3a_t, q3a_rw_t, q3a_rw_t)
  34 setattr_files_pattern(q3a_t, q3a_rw_t, q3a_rw_t)
  35
  36 sysnet_dns_name_resolve(q3a_t)
  37
  38 dev_read_urand(q3a_t)
  39
  40 allow q3a_t self:process execmem;
  41
  42 list_dirs_pattern(q3a_t, games_data_t, games_data_t)