##

policy for hypervkvp

######################################## ##

## Execute hypervkvpd in the hypervkvp domin. ##

## ##

## Domain allowed to transition. ##

## # interface(`hypervkvp_domtrans',` gen_require(` type hypervkvp_t, hypervkvp_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, hypervkvp_exec_t, hypervkvp_t) ') ######################################## ##

## Search hypervkvp lib directories. ##

## ##

## Domain allowed access. ##

## # interface(`hypervkvp_search_lib',` gen_require(` type hypervkvp_var_lib_t; ') allow $1 hypervkvp_var_lib_t:dir search_dir_perms; files_search_var_lib($1) ') ######################################## ##

## Read hypervkvp lib files. ##

## ##

## Domain allowed access. ##

## # interface(`hypervkvp_read_lib_files',` gen_require(` type hypervkvp_var_lib_t; ') files_search_var_lib($1) allow $1 hypervkvp_var_lib_t:dir list_dir_perms; read_files_pattern($1, hypervkvp_var_lib_t, hypervkvp_var_lib_t) ') ######################################## ##

## Create, read, write, and delete ## hypervkvp lib files. ##

## ##

## Domain allowed access. ##

## # interface(`hypervkvp_manage_lib_files',` gen_require(` type hypervkvp_var_lib_t; ') files_search_var_lib($1) manage_files_pattern($1, hypervkvp_var_lib_t, hypervkvp_var_lib_t) ')