mapcrafter.te 1.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. policy_module(mapcrafter, 0.1.2)
  2. #################################
  3. #
  4. # Declarations
  5. #
  6. type mapcrafter_t;
  7. type mapcrafter_exec_t;
  8. init_system_domain(mapcrafter_t, mapcrafter_exec_t)
  9. type mapcrafter_usr_t;
  10. files_type(mapcrafter_usr_t)
  11. type mapcrafter_etc_t;
  12. files_config_file(mapcrafter_etc_t)
  13. ########################################
  14. #
  15. # Local policy
  16. #
  17. allow mapcrafter_t self:process signal;
  18. gen_require(`
  19. type minecraft_opt_t;
  20. ')
  21. search_dirs_pattern(mapcrafter_t, minecraft_opt_t, minecraft_opt_t)
  22. read_files_pattern(mapcrafter_t, minecraft_opt_t, minecraft_opt_t)
  23. allow mapcrafter_t minecraft_opt_t:dir read;
  24. apache_manage_sys_content(mapcrafter_t)
  25. search_dirs_pattern(mapcrafter_t, mapcrafter_usr_t, mapcrafter_usr_t)
  26. read_files_pattern(mapcrafter_t, mapcrafter_usr_t, mapcrafter_usr_t)
  27. allow mapcrafter_t mapcrafter_usr_t:dir read;
  28. read_files_pattern(mapcrafter_t, mapcrafter_etc_t, mapcrafter_etc_t)
  29. miscfiles_read_localization(mapcrafter_t)
  30. corecmd_search_bin(mapcrafter_t)
  31. optional_policy(`
  32. cron_system_entry(mapcrafter_t, mapcrafter_exec_t)
  33. ')
  34. gen_require(`
  35. type crond_tmp_t;
  36. ')
  37. allow mapcrafter_t crond_tmp_t:file { read write ioctl getattr };