git.if 900 B

123456789101112131415161718192021222324252627282930313233343536373839
  1. ########################################
  2. ## <summary>
  3. ## Execute the git binary in the caller domain.
  4. ## </summary>
  5. ## <param name="domain">
  6. ## <summary>
  7. ## Domain allowed access.
  8. ## </summary>
  9. ## </param>
  10. #
  11. interface(`git_exec',`
  12. gen_require(`
  13. type git_exec_t;
  14. ')
  15. corecmd_search_bin($1)
  16. can_exec($1, git_exec_t)
  17. ')
  18. ########################################
  19. ## <summary>
  20. ## Read files and directories of type git_usr_t.
  21. ## </summary>
  22. ## <param name="domain">
  23. ## <summary>
  24. ## Domain allowed access.
  25. ## </summary>
  26. ## </param>
  27. #
  28. interface(`git_read_usr_t',`
  29. gen_require(`
  30. type git_usr_t;
  31. ')
  32. search_dirs_pattern($1, git_usr_t, git_usr_t)
  33. list_dirs_pattern($1, git_usr_t, git_usr_t)
  34. read_files_pattern($1, git_usr_t, git_usr_t)
  35. getattr_files_pattern($1, git_usr_t, git_usr_t)
  36. ')