From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Thu, 05 Aug 2010 10:03:44 -0400
Subject: [refpolicy] [ apps layer patch 1/1] apps: domain { allowed to
 transition, allowed access, to not audit }.
In-Reply-To: <20100803155331.GA1609@localhost.localdomain>
References: <20100803155331.GA1609@localhost.localdomain>
Message-ID: <4C5AC4C0.8050306@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 08/03/10 11:53, Dominick Grift wrote:
> Signed-off-by: Dominick Grift<domg472@gmail.com>

Merged.

> ---
> :100644 100644 3f3bbe0... f2fae5a... M	policy/modules/apps/ada.if
> :100644 100644 d1c32ae... d28020f... M	policy/modules/apps/authbind.if
> :100644 100644 9601de0... b7bcad4... M	policy/modules/apps/gnome.if
> :100644 100644 793cde7... 40e0a2a... M	policy/modules/apps/gpg.if
> :100644 100644 9bb8f31... 0cfdf9f... M	policy/modules/apps/java.if
> :100644 100644 272e97a... 12b772f... M	policy/modules/apps/livecd.if
> :100644 100644 c3beba5... b55edd0... M	policy/modules/apps/loadkeys.if
> :100644 100644 a6af322... 1016374... M	policy/modules/apps/mono.if
> :100644 100644 344a5b3... 9a6d67d... M	policy/modules/apps/mozilla.if
> :100644 100644 c7ad0f5... d8ea41d... M	policy/modules/apps/mplayer.if
> :100644 100644 60b8bc2... 7e2092d... M	policy/modules/apps/podsleuth.if
> :100644 100644 f1c2698... 8a98580... M	policy/modules/apps/ptchown.if
> :100644 100644 9ebb373... a0c50da... M	policy/modules/apps/pulseaudio.if
> :100644 100644 255d869... c1d5f50... M	policy/modules/apps/qemu.if
> :100644 100644 3870eda... 7cdac1e... M	policy/modules/apps/rssh.if
> :100644 100644 7f47897... 1dc7a85... M	policy/modules/apps/seunshare.if
> :100644 100644 c2cc18d... a76e9f9... M	policy/modules/apps/thunderbird.if
> :100644 100644 cc4609c... 1b79617... M	policy/modules/apps/usernetctl.if
> :100644 100644 dac920d... 0412e70... M	policy/modules/apps/webalizer.if
> :100644 100644 f5217b8... c31ddb7... M	policy/modules/apps/wine.if
> :100644 100644 a7c27a5... ea6ffe6... M	policy/modules/apps/wireshark.if
> :100644 100644 5fb7790... 78543d4... M	policy/modules/apps/yam.if
>   policy/modules/apps/ada.if         |    4 ++--
>   policy/modules/apps/authbind.if    |    2 +-
>   policy/modules/apps/gnome.if       |    4 ++--
>   policy/modules/apps/gpg.if         |    2 +-
>   policy/modules/apps/java.if        |    8 ++++----
>   policy/modules/apps/livecd.if      |    2 +-
>   policy/modules/apps/loadkeys.if    |    4 ++--
>   policy/modules/apps/mono.if        |    4 ++--
>   policy/modules/apps/mozilla.if     |    6 +++---
>   policy/modules/apps/mplayer.if     |    2 +-
>   policy/modules/apps/podsleuth.if   |    2 +-
>   policy/modules/apps/ptchown.if     |    2 +-
>   policy/modules/apps/pulseaudio.if  |    4 ++--
>   policy/modules/apps/qemu.if        |    2 +-
>   policy/modules/apps/rssh.if        |    2 +-
>   policy/modules/apps/seunshare.if   |    2 +-
>   policy/modules/apps/thunderbird.if |    2 +-
>   policy/modules/apps/usernetctl.if  |    4 ++--
>   policy/modules/apps/webalizer.if   |    4 ++--
>   policy/modules/apps/wine.if        |    4 ++--
>   policy/modules/apps/wireshark.if   |    2 +-
>   policy/modules/apps/yam.if         |    4 ++--
>   22 files changed, 36 insertions(+), 36 deletions(-)
>
> diff --git a/policy/modules/apps/ada.if b/policy/modules/apps/ada.if
> index 3f3bbe0..f2fae5a 100644
> --- a/policy/modules/apps/ada.if
> +++ b/policy/modules/apps/ada.if
> @@ -6,7 +6,7 @@
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -26,7 +26,7 @@ interface(`ada_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/authbind.if b/policy/modules/apps/authbind.if
> index d1c32ae..d28020f 100644
> --- a/policy/modules/apps/authbind.if
> +++ b/policy/modules/apps/authbind.if
> @@ -6,7 +6,7 @@
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/gnome.if b/policy/modules/apps/gnome.if
> index 9601de0..b7bcad4 100644
> --- a/policy/modules/apps/gnome.if
> +++ b/policy/modules/apps/gnome.if
> @@ -41,7 +41,7 @@ interface(`gnome_role',`
>   ##</summary>
>   ##<param name="user_domain">
>   ##	<summary>
> -##	The type of the user domain.
> +##	Domain allowed access.
>   ##	</summary>
>   ##</param>
>   #
> @@ -78,7 +78,7 @@ interface(`gnome_domtrans_gconfd',`
>   ##</summary>
>   ##<param name="user_domain">
>   ##	<summary>
> -##	The type of the user domain.
> +##	Domain allowed access.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/gpg.if b/policy/modules/apps/gpg.if
> index 793cde7..40e0a2a 100644
> --- a/policy/modules/apps/gpg.if
> +++ b/policy/modules/apps/gpg.if
> @@ -73,7 +73,7 @@ interface(`gpg_role',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/java.if b/policy/modules/apps/java.if
> index 9bb8f31..0cfdf9f 100644
> --- a/policy/modules/apps/java.if
> +++ b/policy/modules/apps/java.if
> @@ -101,7 +101,7 @@ template(`java_role_template',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -120,7 +120,7 @@ template(`java_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> @@ -144,7 +144,7 @@ interface(`java_run',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -163,7 +163,7 @@ interface(`java_domtrans_unconfined',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/livecd.if b/policy/modules/apps/livecd.if
> index 272e97a..12b772f 100644
> --- a/policy/modules/apps/livecd.if
> +++ b/policy/modules/apps/livecd.if
> @@ -25,7 +25,7 @@ interface(`livecd_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/loadkeys.if b/policy/modules/apps/loadkeys.if
> index c3beba5..b55edd0 100644
> --- a/policy/modules/apps/loadkeys.if
> +++ b/policy/modules/apps/loadkeys.if
> @@ -6,7 +6,7 @@
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -29,7 +29,7 @@ interface(`loadkeys_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/mono.if b/policy/modules/apps/mono.if
> index a6af322..1016374 100644
> --- a/policy/modules/apps/mono.if
> +++ b/policy/modules/apps/mono.if
> @@ -62,7 +62,7 @@ template(`mono_role_template',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -82,7 +82,7 @@ interface(`mono_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/mozilla.if b/policy/modules/apps/mozilla.if
> index 344a5b3..9a6d67d 100644
> --- a/policy/modules/apps/mozilla.if
> +++ b/policy/modules/apps/mozilla.if
> @@ -99,7 +99,7 @@ interface(`mozilla_write_user_home_files',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain to not audit.
>   ##	</summary>
>   ##</param>
>   #
> @@ -117,7 +117,7 @@ interface(`mozilla_dontaudit_rw_user_home_files',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain to not audit.
>   ##	</summary>
>   ##</param>
>   #
> @@ -154,7 +154,7 @@ interface(`mozilla_execmod_user_home_files',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/mplayer.if b/policy/modules/apps/mplayer.if
> index c7ad0f5..d8ea41d 100644
> --- a/policy/modules/apps/mplayer.if
> +++ b/policy/modules/apps/mplayer.if
> @@ -53,7 +53,7 @@ interface(`mplayer_role',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/podsleuth.if b/policy/modules/apps/podsleuth.if
> index 60b8bc2..7e2092d 100644
> --- a/policy/modules/apps/podsleuth.if
> +++ b/policy/modules/apps/podsleuth.if
> @@ -26,7 +26,7 @@ interface(`podsleuth_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/ptchown.if b/policy/modules/apps/ptchown.if
> index f1c2698..8a98580 100644
> --- a/policy/modules/apps/ptchown.if
> +++ b/policy/modules/apps/ptchown.if
> @@ -25,7 +25,7 @@ interface(`ptchown_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/pulseaudio.if b/policy/modules/apps/pulseaudio.if
> index 9ebb373..a0c50da 100644
> --- a/policy/modules/apps/pulseaudio.if
> +++ b/policy/modules/apps/pulseaudio.if
> @@ -64,7 +64,7 @@ interface(`pulseaudio_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> @@ -88,7 +88,7 @@ interface(`pulseaudio_run',`
>   ##</summary>
>   ##<param name="domain">
>   ##<summary>
> -##	Domain allowed to transition.
> +##	Domain allowed access.
>   ##</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/qemu.if b/policy/modules/apps/qemu.if
> index 255d869..c1d5f50 100644
> --- a/policy/modules/apps/qemu.if
> +++ b/policy/modules/apps/qemu.if
> @@ -161,7 +161,7 @@ interface(`qemu_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/rssh.if b/policy/modules/apps/rssh.if
> index 3870eda..7cdac1e 100644
> --- a/policy/modules/apps/rssh.if
> +++ b/policy/modules/apps/rssh.if
> @@ -33,7 +33,7 @@ interface(`rssh_role',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/seunshare.if b/policy/modules/apps/seunshare.if
> index 7f47897..1dc7a85 100644
> --- a/policy/modules/apps/seunshare.if
> +++ b/policy/modules/apps/seunshare.if
> @@ -25,7 +25,7 @@ interface(`seunshare_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/thunderbird.if b/policy/modules/apps/thunderbird.if
> index c2cc18d..a76e9f9 100644
> --- a/policy/modules/apps/thunderbird.if
> +++ b/policy/modules/apps/thunderbird.if
> @@ -50,7 +50,7 @@ interface(`thunderbird_role',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/usernetctl.if b/policy/modules/apps/usernetctl.if
> index cc4609c..1b79617 100644
> --- a/policy/modules/apps/usernetctl.if
> +++ b/policy/modules/apps/usernetctl.if
> @@ -6,7 +6,7 @@
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -25,7 +25,7 @@ interface(`usernetctl_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/webalizer.if b/policy/modules/apps/webalizer.if
> index dac920d..0412e70 100644
> --- a/policy/modules/apps/webalizer.if
> +++ b/policy/modules/apps/webalizer.if
> @@ -6,7 +6,7 @@
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -25,7 +25,7 @@ interface(`webalizer_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/wine.if b/policy/modules/apps/wine.if
> index f5217b8..c31ddb7 100644
> --- a/policy/modules/apps/wine.if
> +++ b/policy/modules/apps/wine.if
> @@ -116,7 +116,7 @@ template(`wine_role_template',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -136,7 +136,7 @@ interface(`wine_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
> diff --git a/policy/modules/apps/wireshark.if b/policy/modules/apps/wireshark.if
> index a7c27a5..ea6ffe6 100644
> --- a/policy/modules/apps/wireshark.if
> +++ b/policy/modules/apps/wireshark.if
> @@ -42,7 +42,7 @@ interface(`wireshark_role',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> diff --git a/policy/modules/apps/yam.if b/policy/modules/apps/yam.if
> index 5fb7790..78543d4 100644
> --- a/policy/modules/apps/yam.if
> +++ b/policy/modules/apps/yam.if
> @@ -6,7 +6,7 @@
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   #
> @@ -26,7 +26,7 @@ interface(`yam_domtrans',`
>   ##</summary>
>   ##<param name="domain">
>   ##	<summary>
> -##	Domain allowed access.
> +##	Domain allowed to transition.
>   ##	</summary>
>   ##</param>
>   ##<param name="role">
>
>
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy


-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com