aboutsummaryrefslogtreecommitdiff
blob: 789b8f8a3c84cefd74d2754c7afb6ba05ce40388 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
## <summary>Skype softphone.</summary>

#######################################
## <summary>
##      Role access for the skype module.
## </summary>
## <param name="role">
##      <summary>
##      The role associated with the user domain.
##      </summary>
## </param>
## <param name="user_domain">
##      <summary>
##      The type of the user domain.
##      </summary>
## </param>
#
interface(`skype_role',`
	gen_require(`
		type skype_t, skype_exec_t, skype_tmpfs_t, skype_home_t;
	')
	
	role $1 types skype_t;
	
	domtrans_pattern($2, skype_exec_t, skype_t)

	allow $2 skype_t:process { ptrace signal_perms };
	dontaudit skype_t $2:unix_stream_socket { connectto };

	manage_dirs_pattern($2, skype_home_t, skype_home_t)
	manage_files_pattern($2, skype_home_t, skype_home_t)
	manage_lnk_files_pattern($2, skype_home_t, skype_home_t)

	relabel_dirs_pattern($2, skype_home_t, skype_home_t)
	relabel_files_pattern($2, skype_home_t, skype_home_t)
	relabel_lnk_files_pattern($2, skype_home_t, skype_home_t)

	ps_process_pattern($2, skype_t)
')