From: domg472@gmail.com (Dominick Grift) Date: Tue, 3 Aug 2010 17:53:36 +0200 Subject: [refpolicy] [ apps layer patch 1/1] apps: domain { allowed to transition, allowed access, to not audit }. Message-ID: <20100803155331.GA1609@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Signed-off-by: Dominick Grift --- :100644 100644 3f3bbe0... f2fae5a... M policy/modules/apps/ada.if :100644 100644 d1c32ae... d28020f... M policy/modules/apps/authbind.if :100644 100644 9601de0... b7bcad4... M policy/modules/apps/gnome.if :100644 100644 793cde7... 40e0a2a... M policy/modules/apps/gpg.if :100644 100644 9bb8f31... 0cfdf9f... M policy/modules/apps/java.if :100644 100644 272e97a... 12b772f... M policy/modules/apps/livecd.if :100644 100644 c3beba5... b55edd0... M policy/modules/apps/loadkeys.if :100644 100644 a6af322... 1016374... M policy/modules/apps/mono.if :100644 100644 344a5b3... 9a6d67d... M policy/modules/apps/mozilla.if :100644 100644 c7ad0f5... d8ea41d... M policy/modules/apps/mplayer.if :100644 100644 60b8bc2... 7e2092d... M policy/modules/apps/podsleuth.if :100644 100644 f1c2698... 8a98580... M policy/modules/apps/ptchown.if :100644 100644 9ebb373... a0c50da... M policy/modules/apps/pulseaudio.if :100644 100644 255d869... c1d5f50... M policy/modules/apps/qemu.if :100644 100644 3870eda... 7cdac1e... M policy/modules/apps/rssh.if :100644 100644 7f47897... 1dc7a85... M policy/modules/apps/seunshare.if :100644 100644 c2cc18d... a76e9f9... M policy/modules/apps/thunderbird.if :100644 100644 cc4609c... 1b79617... M policy/modules/apps/usernetctl.if :100644 100644 dac920d... 0412e70... M policy/modules/apps/webalizer.if :100644 100644 f5217b8... c31ddb7... M policy/modules/apps/wine.if :100644 100644 a7c27a5... ea6ffe6... M policy/modules/apps/wireshark.if :100644 100644 5fb7790... 78543d4... M policy/modules/apps/yam.if policy/modules/apps/ada.if | 4 ++-- policy/modules/apps/authbind.if | 2 +- policy/modules/apps/gnome.if | 4 ++-- policy/modules/apps/gpg.if | 2 +- policy/modules/apps/java.if | 8 ++++---- policy/modules/apps/livecd.if | 2 +- policy/modules/apps/loadkeys.if | 4 ++-- policy/modules/apps/mono.if | 4 ++-- policy/modules/apps/mozilla.if | 6 +++--- policy/modules/apps/mplayer.if | 2 +- policy/modules/apps/podsleuth.if | 2 +- policy/modules/apps/ptchown.if | 2 +- policy/modules/apps/pulseaudio.if | 4 ++-- policy/modules/apps/qemu.if | 2 +- policy/modules/apps/rssh.if | 2 +- policy/modules/apps/seunshare.if | 2 +- policy/modules/apps/thunderbird.if | 2 +- policy/modules/apps/usernetctl.if | 4 ++-- policy/modules/apps/webalizer.if | 4 ++-- policy/modules/apps/wine.if | 4 ++-- policy/modules/apps/wireshark.if | 2 +- policy/modules/apps/yam.if | 4 ++-- 22 files changed, 36 insertions(+), 36 deletions(-) diff --git a/policy/modules/apps/ada.if b/policy/modules/apps/ada.if index 3f3bbe0..f2fae5a 100644 --- a/policy/modules/apps/ada.if +++ b/policy/modules/apps/ada.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -26,7 +26,7 @@ interface(`ada_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/authbind.if b/policy/modules/apps/authbind.if index d1c32ae..d28020f 100644 --- a/policy/modules/apps/authbind.if +++ b/policy/modules/apps/authbind.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/apps/gnome.if b/policy/modules/apps/gnome.if index 9601de0..b7bcad4 100644 --- a/policy/modules/apps/gnome.if +++ b/policy/modules/apps/gnome.if @@ -41,7 +41,7 @@ interface(`gnome_role',` ## ## ## -## The type of the user domain. +## Domain allowed access. ## ## # @@ -78,7 +78,7 @@ interface(`gnome_domtrans_gconfd',` ## ## ## -## The type of the user domain. +## Domain allowed access. ## ## # diff --git a/policy/modules/apps/gpg.if b/policy/modules/apps/gpg.if index 793cde7..40e0a2a 100644 --- a/policy/modules/apps/gpg.if +++ b/policy/modules/apps/gpg.if @@ -73,7 +73,7 @@ interface(`gpg_role',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/apps/java.if b/policy/modules/apps/java.if index 9bb8f31..0cfdf9f 100644 --- a/policy/modules/apps/java.if +++ b/policy/modules/apps/java.if @@ -101,7 +101,7 @@ template(`java_role_template',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -120,7 +120,7 @@ template(`java_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -144,7 +144,7 @@ interface(`java_run',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -163,7 +163,7 @@ interface(`java_domtrans_unconfined',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/livecd.if b/policy/modules/apps/livecd.if index 272e97a..12b772f 100644 --- a/policy/modules/apps/livecd.if +++ b/policy/modules/apps/livecd.if @@ -25,7 +25,7 @@ interface(`livecd_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/loadkeys.if b/policy/modules/apps/loadkeys.if index c3beba5..b55edd0 100644 --- a/policy/modules/apps/loadkeys.if +++ b/policy/modules/apps/loadkeys.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -29,7 +29,7 @@ interface(`loadkeys_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/mono.if b/policy/modules/apps/mono.if index a6af322..1016374 100644 --- a/policy/modules/apps/mono.if +++ b/policy/modules/apps/mono.if @@ -62,7 +62,7 @@ template(`mono_role_template',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -82,7 +82,7 @@ interface(`mono_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if index 344a5b3..9a6d67d 100644 --- a/policy/modules/apps/mozilla.if +++ b/policy/modules/apps/mozilla.if @@ -99,7 +99,7 @@ interface(`mozilla_write_user_home_files',` ## ## ## -## Domain allowed access. +## Domain to not audit. ## ## # @@ -117,7 +117,7 @@ interface(`mozilla_dontaudit_rw_user_home_files',` ## ## ## -## Domain allowed access. +## Domain to not audit. ## ## # @@ -154,7 +154,7 @@ interface(`mozilla_execmod_user_home_files',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/apps/mplayer.if b/policy/modules/apps/mplayer.if index c7ad0f5..d8ea41d 100644 --- a/policy/modules/apps/mplayer.if +++ b/policy/modules/apps/mplayer.if @@ -53,7 +53,7 @@ interface(`mplayer_role',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/apps/podsleuth.if b/policy/modules/apps/podsleuth.if index 60b8bc2..7e2092d 100644 --- a/policy/modules/apps/podsleuth.if +++ b/policy/modules/apps/podsleuth.if @@ -26,7 +26,7 @@ interface(`podsleuth_domtrans',` ## ## ## -## Domain allowed access +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/ptchown.if b/policy/modules/apps/ptchown.if index f1c2698..8a98580 100644 --- a/policy/modules/apps/ptchown.if +++ b/policy/modules/apps/ptchown.if @@ -25,7 +25,7 @@ interface(`ptchown_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/pulseaudio.if b/policy/modules/apps/pulseaudio.if index 9ebb373..a0c50da 100644 --- a/policy/modules/apps/pulseaudio.if +++ b/policy/modules/apps/pulseaudio.if @@ -64,7 +64,7 @@ interface(`pulseaudio_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## @@ -88,7 +88,7 @@ interface(`pulseaudio_run',` ## ## ## -## Domain allowed to transition. +## Domain allowed access. ## ## # diff --git a/policy/modules/apps/qemu.if b/policy/modules/apps/qemu.if index 255d869..c1d5f50 100644 --- a/policy/modules/apps/qemu.if +++ b/policy/modules/apps/qemu.if @@ -161,7 +161,7 @@ interface(`qemu_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/rssh.if b/policy/modules/apps/rssh.if index 3870eda..7cdac1e 100644 --- a/policy/modules/apps/rssh.if +++ b/policy/modules/apps/rssh.if @@ -33,7 +33,7 @@ interface(`rssh_role',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/apps/seunshare.if b/policy/modules/apps/seunshare.if index 7f47897..1dc7a85 100644 --- a/policy/modules/apps/seunshare.if +++ b/policy/modules/apps/seunshare.if @@ -25,7 +25,7 @@ interface(`seunshare_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/thunderbird.if b/policy/modules/apps/thunderbird.if index c2cc18d..a76e9f9 100644 --- a/policy/modules/apps/thunderbird.if +++ b/policy/modules/apps/thunderbird.if @@ -50,7 +50,7 @@ interface(`thunderbird_role',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/apps/usernetctl.if b/policy/modules/apps/usernetctl.if index cc4609c..1b79617 100644 --- a/policy/modules/apps/usernetctl.if +++ b/policy/modules/apps/usernetctl.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`usernetctl_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/webalizer.if b/policy/modules/apps/webalizer.if index dac920d..0412e70 100644 --- a/policy/modules/apps/webalizer.if +++ b/policy/modules/apps/webalizer.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -25,7 +25,7 @@ interface(`webalizer_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/wine.if b/policy/modules/apps/wine.if index f5217b8..c31ddb7 100644 --- a/policy/modules/apps/wine.if +++ b/policy/modules/apps/wine.if @@ -116,7 +116,7 @@ template(`wine_role_template',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -136,7 +136,7 @@ interface(`wine_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## diff --git a/policy/modules/apps/wireshark.if b/policy/modules/apps/wireshark.if index a7c27a5..ea6ffe6 100644 --- a/policy/modules/apps/wireshark.if +++ b/policy/modules/apps/wireshark.if @@ -42,7 +42,7 @@ interface(`wireshark_role',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # diff --git a/policy/modules/apps/yam.if b/policy/modules/apps/yam.if index 5fb7790..78543d4 100644 --- a/policy/modules/apps/yam.if +++ b/policy/modules/apps/yam.if @@ -6,7 +6,7 @@ ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## # @@ -26,7 +26,7 @@ interface(`yam_domtrans',` ## ## ## -## Domain allowed access. +## Domain allowed to transition. ## ## ## -- 1.7.2 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100803/696864b7/attachment.bin