######################################## ## ## Execute the git binary in the caller domain. ## ## ## ## Domain allowed access. ## ## # interface(`git_exec',` gen_require(` type git_exec_t; ') corecmd_search_bin($1) can_exec($1, git_exec_t) ') ######################################## ## ## Read files and directories of type git_usr_t. ## ## ## ## Domain allowed access. ## ## # interface(`git_read_usr_t',` gen_require(` type git_usr_t; ') search_dirs_pattern($1, git_usr_t, git_usr_t) list_dirs_pattern($1, git_usr_t, git_usr_t) read_files_pattern($1, git_usr_t, git_usr_t) getattr_files_pattern($1, git_usr_t, git_usr_t) ')