## cloudform policy
#######################################
##
## Creates types and rules for a basic
## cloudform daemon domain.
##
##
##
## Prefix for the domain.
##
##
#
template(`cloudform_domain_template',`
gen_require(`
attribute cloudform_domain;
')
type $1_t, cloudform_domain;
type $1_exec_t;
init_daemon_domain($1_t, $1_exec_t)
')
######################################
##
## Execute mongod in the caller domain.
##
##
##
## Domain allowed access.
##
##
#
interface(`cloudform_exec_mongod',`
gen_require(`
type mongod_exec_t;
')
can_exec($1, mongod_exec_t)
')