Add quake2

[selinux.git] / quake2 / quake2.te

diff --git a/quake2/quake2.te b/quake2/quake2.te
new file mode 100644 (file)
index 0000000..6215cf7
--- /dev/null
+++ b/quake2/quake2.te
@@ -0,0 +1,32 @@
+policy_module(quake2, 0.1.0)
+
+# File context for the executable process
+type quake2_t;
+type quake2_exec_t;
+
+type quake2_rw_t;
+files_type(quake2_rw_t)
+
+type quake2_ro_t;
+files_type(quake2_ro_t)
+
+type quake2_tmp_t;
+files_tmp_file(quake2_tmp_t)
+
+init_daemon_domain(quake2_t, quake2_exec_t)
+
+corenet_udp_sendrecv_generic_port(quake2_t)
+corenet_udp_bind_generic_port(quake2_t)
+corenet_udp_bind_generic_node(quake2_t)
+
+allow quake2_t quake2_ro_t:dir list_dir_perms;
+allow quake2_t quake2_ro_t:file read_file_perms;
+#allow quake2_t quake2_tmp_t:file manage_file_perms;
+#allow quake2_t quake2_tmp_t:dir manage_dir_perms;
+
+manage_files_pattern(quake2_t, quake2_rw_t, quake2_rw_t)
+manage_dirs_pattern(quake2_t, quake2_rw_t, quake2_rw_t)
+setattr_files_pattern(quake2_t, quake2_rw_t, quake2_rw_t)
+
+sysnet_dns_name_resolve(quake2_t)
+files_tmp_filetrans(quake2_t, quake2_tmp_t, { file dir})