[gentoo-commits] proj/hardened-refpolicy:master commit in: /

["Sven Vermeulen" <sven.vermeulen@siphos.be>]

commit:     f1ab4e539476b17c72be5a09cec39ec1b457d894
Author:     Dominick Grift <dominick.grift <AT> gmail <DOT> com>
AuthorDate: Fri Oct  5 12:42:46 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Sat Oct  6 15:52:57 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-refpolicy.git;a=commit;h=f1ab4e53

changes to the mandb policy module

Add verious interfaces to be used by miscfiles

Signed-off-by: Dominick Grift <dominick.grift <AT> gmail.com>

---
 mandb.if |   83 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 mandb.te |    2 +-
 2 files changed, 84 insertions(+), 1 deletions(-)

diff --git a/mandb.if b/mandb.if
index 56306c6..35988b0 100644
--- a/mandb.if
+++ b/mandb.if
@@ -48,6 +48,89 @@ interface(`mandb_run',`
 
 ########################################
 ## <summary>
+##	Search mandb cache directories.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`mandb_search_cache',`
+	gen_require(`
+		type mandb_cache_t;
+	')
+
+	files_search_var($1)
+	allow $1 mandb_cache_t:dir search_dir_perms;
+')
+
+########################################
+## <summary>
+##	Delete mandb cache content.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`mandb_delete_cache_content',`
+	gen_require(`
+		type mandb_cache_t;
+	')
+
+	files_search_var($1)
+	allow $1 mandb_cache_t:dir delete_dir_perms;
+	allow $1 mandb_cache_t:file delete_file_perms;
+	allow $1 mandb_cache_t:lnk_file delete_lnk_file_perms;
+')
+
+########################################
+## <summary>
+##	Read mandb cache content.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`mandb_read_cache_content',`
+	gen_require(`
+		type mandb_cache_t;
+	')
+
+	files_search_var($1)
+	allow $1 mandb_cache_t:dir list_dir_perms;
+	allow $1 mandb_cache_t:file read_file_perms;
+	allow $1 mandb_cache_t:lnk_file read_lnk_file_perms;
+')
+
+########################################
+## <summary>
+##	Create, read, write, and delete
+##	mandb cache files.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`mandb_manage_cache_content',`
+	gen_require(`
+		type mandb_cache_t;
+	')
+
+	files_search_var($1)
+	allow $1 mandb_cache_t:dir manage_dir_perms;
+	allow $1 mandb_cache_t:file manage_file_perms;
+	allow $1 mandb_cache_t:lnk_file manage_lnk_file_perms;
+')
+
+########################################
+## <summary>
 ##	All of the rules required to
 ##	administrate an mandb environment.
 ## </summary>

diff --git a/mandb.te b/mandb.te
index 3009005..8db8613 100644
--- a/mandb.te
+++ b/mandb.te
@@ -1,4 +1,4 @@
-policy_module(mandb, 1.0.0)
+policy_module(mandb, 1.0.1)
 
 ########################################
 #