-
Notifications
You must be signed in to change notification settings - Fork 48
/
Copy pathtest_confined_abcdgilmns.cil
24 lines (23 loc) · 1.29 KB
/
test_confined_abcdgilmns.cil
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
(boolean my_container_exec_content true)
(role my_container_r)
(type my_container_dbus_t)
(type my_container_gkeyringd_t)
(type my_container_ssh_agent_t)
(type my_container_sudo_t)
(type my_container_sudo_tmp_t)
(type my_container_t)
(type my_container_userhelper_t)
(user my_container_u)
(userrole my_container_u my_container_r)
(userlevel my_container_u (s0))
(userrange my_container_u ((s0 ) (s0 (c0))))
(call confinedom_admin_commands_macro (my_container_t my_container_r my_container_sudo_t))
(call confinedom_graphical_login_macro (my_container_t my_container_r my_container_dbus_t))
(call confinedom_mozilla_usage_macro (my_container_t my_container_r))
(call confinedom_networking_macro (my_container_t my_container_r))
(call confinedom_security_advanced_macro (my_container_t my_container_r my_container_sudo_t my_container_userhelper_t))
(call confinedom_security_basic_macro (my_container_t my_container_r))
(call confinedom_sudo_macro (my_container_t my_container_r my_container_sudo_t my_container_sudo_tmp_t))
(call confinedom_user_login_macro (my_container_t my_container_r my_container_gkeyringd_t my_container_dbus_t my_container_exec_content))
(call confined_ssh_connect_macro (my_container_t my_container_r my_container_ssh_agent_t))
(call confined_use_basic_commands_macro (my_container_t my_container_r))