policy_module(mapcrafter, 0.1.2)

#################################
#
# Declarations
#

type mapcrafter_t;
type mapcrafter_exec_t;
init_system_domain(mapcrafter_t, mapcrafter_exec_t)

type mapcrafter_usr_t;
files_type(mapcrafter_usr_t)

type mapcrafter_etc_t;
files_config_file(mapcrafter_etc_t)

########################################
#
# Local policy
#

allow mapcrafter_t self:process signal;

gen_require(`
	type minecraft_opt_t;
')
search_dirs_pattern(mapcrafter_t, minecraft_opt_t, minecraft_opt_t)
read_files_pattern(mapcrafter_t, minecraft_opt_t, minecraft_opt_t)
allow mapcrafter_t minecraft_opt_t:dir read;

apache_manage_sys_content(mapcrafter_t)

search_dirs_pattern(mapcrafter_t, mapcrafter_usr_t, mapcrafter_usr_t)
read_files_pattern(mapcrafter_t, mapcrafter_usr_t, mapcrafter_usr_t)
allow mapcrafter_t mapcrafter_usr_t:dir read;

read_files_pattern(mapcrafter_t, mapcrafter_etc_t, mapcrafter_etc_t)

miscfiles_read_localization(mapcrafter_t)
corecmd_search_bin(mapcrafter_t)

optional_policy(`
	cron_system_entry(mapcrafter_t, mapcrafter_exec_t)
')

gen_require(`
	type crond_tmp_t;
')
allow mapcrafter_t crond_tmp_t:file { read write ioctl getattr };