## <summary>policy for httpd_mailgraph_script</summary> ######################################## ## <summary> ## Execute a domain transition to run httpd_mailgraph_script. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`httpd_mailgraph_script_domtrans',` gen_require(` type httpd_mailgraph_script_t, httpd_mailgraph_script_exec_t; ') domain_auto_trans($1,httpd_mailgraph_script_exec_t,httpd_mailgraph_script_t) allow httpd_mailgraph_script_t $1:fd use; allow httpd_mailgraph_script_t $1:fifo_file rw_file_perms; allow httpd_mailgraph_script_t $1:process sigchld; ') ######################################## ## <summary> ## Search httpd_mailgraph_script rw directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`httpd_mailgraph_script_search_rw_dir',` gen_require(` type httpd_mailgraph_script_rw_t; ') allow $1 httpd_mailgraph_script_rw_t:dir search_dir_perms; files_search_rw($1) ') ######################################## ## <summary> ## Read httpd_mailgraph_script rw files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`httpd_mailgraph_script_read_rw_files',` gen_require(` type httpd_mailgraph_script_rw_t; ') allow $1 httpd_mailgraph_script_rw_t:file r_file_perms; allow $1 httpd_mailgraph_script_rw_t:dir list_dir_perms; files_search_rw($1) ') ######################################## ## <summary> ## Create, read, write, and delete ## httpd_mailgraph_script rw files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`httpd_mailgraph_script_manage_rw_files',` gen_require(` type httpd_mailgraph_script_rw_t; ') allow $1 httpd_mailgraph_script_rw_t:file manage_file_perms; allow $1 httpd_mailgraph_script_rw_t:dir rw_dir_perms; ') ######################################## ## <summary> ## Search httpd_mailgraph_script lib directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`httpd_mailgraph_script_search_lib',` gen_require(` type httpd_mailgraph_script_var_lib_t; ') allow $1 httpd_mailgraph_script_var_lib_t:dir search_dir_perms; files_search_var_lib($1) ') ######################################## ## <summary> ## Read httpd_mailgraph_script lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`httpd_mailgraph_script_read_lib_files',` gen_require(` type httpd_mailgraph_script_var_lib_t; ') allow $1 httpd_mailgraph_script_var_lib_t:file r_file_perms; allow $1 httpd_mailgraph_script_var_lib_t:dir list_dir_perms; files_search_var_lib($1) ') ######################################## ## <summary> ## Create, read, write, and delete ## httpd_mailgraph_script lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`httpd_mailgraph_script_manage_lib_files',` gen_require(` type httpd_mailgraph_script_var_lib_t; ') allow $1 httpd_mailgraph_script_var_lib_t:file manage_file_perms; allow $1 httpd_mailgraph_script_var_lib_t:dir rw_dir_perms; files_search_var_lib($1) ')