VULN_CHECK_I913V6
/i\ , d Z dZdZdZdZdZdZdZdZd Z y
) z7
type TEMPLATETYPE_rw_t;
files_type(TEMPLATETYPE_rw_t)
z
manage_dirs_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t)
manage_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t)
manage_lnk_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t)
a
########################################
##
## Search TEMPLATETYPE rw directories.
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_search_rw_dir',`
gen_require(`
type TEMPLATETYPE_rw_t;
')
allow $1 TEMPLATETYPE_rw_t:dir search_dir_perms;
files_search_rw($1)
')
########################################
##
## Read TEMPLATETYPE rw files.
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_read_rw_files',`
gen_require(`
type TEMPLATETYPE_rw_t;
')
read_files_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t)
allow $1 TEMPLATETYPE_rw_t:dir list_dir_perms;
files_search_rw($1)
')
########################################
##
## Manage TEMPLATETYPE rw files.
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_manage_rw_files',`
gen_require(`
type TEMPLATETYPE_rw_t;
')
manage_files_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t)
')
########################################
##
## Create, read, write, and delete
## TEMPLATETYPE rw dirs.
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_manage_rw_dirs',`
gen_require(`
type TEMPLATETYPE_rw_t;
')
manage_dirs_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t)
')
zQ
manage_sock_files_pattern(TEMPLATETYPE_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t)
a ########################################
##
## Connect to TEMPLATETYPE over a unix stream socket.
##
##
##
## Domain allowed access.
##
##
#
interface(`TEMPLATETYPE_stream_connect',`
gen_require(`
type TEMPLATETYPE_t, TEMPLATETYPE_rw_t;
')
stream_connect_pattern($1, TEMPLATETYPE_rw_t, TEMPLATETYPE_rw_t, TEMPLATETYPE_t)
')
z
type TEMPLATETYPE_rw_t;z=
files_search_etc($1)
admin_pattern($1, TEMPLATETYPE_rw_t)
zB
FILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_rw_t,s0)
zLFILENAME -s gen_context(system_u:object_r:TEMPLATETYPE_etc_rw_t,s0)
zE
FILENAME(/.*)? gen_context(system_u:object_r:TEMPLATETYPE_rw_t,s0)
N)
te_typeste_rulesif_ruleste_stream_rulesif_stream_rulesif_admin_typesif_admin_rulesfc_file fc_sock_filefc_dir :/usr/lib/python3.12/site-packages/sepolicy/templates/rw.pyr sM 0
M
^( r