1 policy_module(tesseract, 0.1.1)
3 # File context for the executable process
8 files_type(tesseract_rw_t)
11 files_type(tesseract_ro_t)
13 #type tesseract_tmp_t;
14 #files_tmp_file(tesseract_tmp_t)
16 init_daemon_domain(tesseract_t, tesseract_exec_t)
18 corenet_udp_sendrecv_generic_port(tesseract_t)
19 corenet_udp_bind_generic_port(tesseract_t)
20 corenet_udp_bind_generic_node(tesseract_t)
22 allow tesseract_t tesseract_ro_t:dir list_dir_perms;
23 allow tesseract_t tesseract_ro_t:file read_file_perms;
24 #allow tesseract_t tesseract_tmp_t:file manage_file_perms;
25 #allow tesseract_t tesseract_tmp_t:dir manage_dir_perms;
27 #manage_files_pattern(tesseract_t, tesseract_rw_t, tesseract_rw_t)
28 #manage_dirs_pattern(tesseract_t, tesseract_rw_t, tesseract_rw_t)
29 #setattr_files_pattern(tesseract_t, tesseract_rw_t, tesseract_rw_t)
31 sysnet_dns_name_resolve(tesseract_t)
32 #files_tmp_filetrans(tesseract_t, tesseract_tmp_t, { file dir})