quake2/quake2.te

   1 policy_module(quake2, 0.1.12)
   2
   3 require {
   4     type games_data_t;
   5 }
   6
   7 # File context for the executable process
   8 type quake2_t;
   9 type quake2_exec_t;
  10
  11 type quake2_rw_t;
  12 files_type(quake2_rw_t)
  13
  14 type quake2_ro_t;
  15 files_type(quake2_ro_t)
  16
  17 _sky_files_use_tmp(quake2_t, quake2_tmp_t)
  18
  19 init_domain(quake2_t, quake2_exec_t)
  20 init_daemon_domain(quake2_t, quake2_exec_t)
  21
  22 corenet_udp_sendrecv_generic_port(quake2_t)
  23 corenet_udp_bind_generic_port(quake2_t)
  24 corenet_udp_bind_generic_node(quake2_t)
  25
  26 read_files_pattern(quake2_t, quake2_ro_t, quake2_ro_t)
  27 list_dirs_pattern(quake2_t, quake2_ro_t, quake2_ro_t)
  28
  29 manage_files_pattern(quake2_t, quake2_rw_t, quake2_rw_t)
  30 manage_dirs_pattern(quake2_t, quake2_rw_t, quake2_rw_t)
  31 setattr_files_pattern(quake2_t, quake2_rw_t, quake2_rw_t)
  32
  33 sysnet_dns_name_resolve(quake2_t)
  34
  35 allow quake2_t self:process execmem;
  36
  37 list_dirs_pattern(quake2_t, games_data_t, games_data_t)