diff options
Diffstat (limited to 'policy/modules/contrib/thunderbird.if')
| -rw-r--r-- | policy/modules/contrib/thunderbird.if | 59 |
1 files changed, 0 insertions, 59 deletions
diff --git a/policy/modules/contrib/thunderbird.if b/policy/modules/contrib/thunderbird.if deleted file mode 100644 index 9c5f0b91..00000000 --- a/policy/modules/contrib/thunderbird.if +++ /dev/null @@ -1,59 +0,0 @@ -## <summary>Thunderbird email client.</summary> - -######################################## -## <summary> -## Role access for thunderbird. -## </summary> -## <param name="role"> -## <summary> -## Role allowed access. -## </summary> -## </param> -## <param name="domain"> -## <summary> -## User domain for the role. -## </summary> -## </param> -# -interface(`thunderbird_role',` - gen_require(` - attribute_role thunderbird_roles; - type thunderbird_t, thunderbird_exec_t, thunderbird_home_t; - type thunderbird_tmpfs_t; - ') - - roleattribute $1 thunderbird_roles; - - domtrans_pattern($2, thunderbird_exec_t, thunderbird_t) - - stream_connect_pattern($2, thunderbird_tmpfs_t, thunderbird_tmpfs_t, thunderbird_t) - - allow thunderbird_t $2:unix_stream_socket connectto; - - allow $2 thunderbird_t:process { ptrace signal_perms }; - ps_process_pattern($2, thunderbird_t) - - allow $2 thunderbird_home_t:dir { manage_dir_perms relabel_dir_perms }; - allow $2 thunderbird_home_t:file { manage_file_perms relabel_file_perms }; - allow $2 thunderbird_home_t:lnk_file { manage_lnk_file_perms relabel_lnk_file_perms }; - userdom_user_home_dir_filetrans($2, thunderbird_home_t, dir, ".thunderbird") -') - -######################################## -## <summary> -## Execute thunderbird in the thunderbird domain. -## </summary> -## <param name="domain"> -## <summary> -## Domain allowed to transition. -## </summary> -## </param> -# -interface(`thunderbird_domtrans',` - gen_require(` - type thunderbird_t, thunderbird_exec_t; - ') - - corecmd_search_bin($1) - domtrans_pattern($1, thunderbird_exec_t, thunderbird_t) -') |