supervisor.if 787 B

123456789101112131415161718192021222324252627282930
  1. ## <summary>Process supervisor written in python.</summary>
  2. ########################################
  3. ## <summary>
  4. ## Create a domain which can be
  5. ## started by supervisord.
  6. ## </summary>
  7. ## <param name="domain">
  8. ## <summary>
  9. ## Type to be used as a domain.
  10. ## </summary>
  11. ## </param>
  12. ## <param name="entrypoint">
  13. ## <summary>
  14. ## Type of the program to be used as an entry point to this domain.
  15. ## </summary>
  16. ## </param>
  17. #
  18. interface(`supervisor_service_domain',`
  19. gen_require(`
  20. type supervisor_t;
  21. ')
  22. domain_auto_transition_pattern(supervisor_t, $2, $1)
  23. allow $1 supervisor_t:fd use;
  24. allow $1 supervisor_t:fifo_file { read write ioctl getattr };
  25. allow $1 supervisor_t:process sigchld;
  26. allow supervisor_t $1:process { signal siginh rlimitinh noatsecure };
  27. ')