##

policy for swift

######################################## ##

## Execute TEMPLATE in the swift domin. ##

## ##

## Domain allowed to transition. ##

## # interface(`swift_domtrans',` gen_require(` type swift_t, swift_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, swift_exec_t, swift_t) ') ######################################## ##

## Read swift PID files. ##

## ##

## Domain allowed access. ##

## # interface(`swift_read_pid_files',` gen_require(` type swift_var_run_t; ') files_search_pids($1) read_files_pattern($1, swift_var_run_t, swift_var_run_t) ') ######################################## ##

## Manage swift data files. ##

## ##

## Domain allowed access. ##

## # interface(`swift_manage_data_files',` gen_require(` type swift_data_t; ') files_search_pids($1) manage_files_pattern($1, swift_data_t, swift_data_t) manage_dirs_pattern($1, swift_data_t, swift_data_t) ') ##################################### ##

## Read and write swift lock files. ##

## ##

## Domain allowed access. ##

## # interface(`swift_manage_lock',` gen_require(` type swift_lock_t; ') files_search_locks($1) manage_files_pattern($1, swift_lock_t, swift_lock_t) ') ####################################### ##

## Transition content labels to swift named content ##

## ##

## Domain allowed access. ##

## # interface(`swift_filetrans_lock',` gen_require(` type swift_lock_t; ') files_lock_filetrans($1, swift_lock_t, file) ')