FM / templates

/usr/lib/python3.6/site-packages/sepolicy/templates/

/usr/lib/python3.6/site-packages/sepolicy/templates

Name	Size	Mode	Actions
__pycache__/	-	0755	rm
boolean.py	1182	0644	edit dl rm
etc_rw.py	3852	0644	edit dl rm
executable.py	9891	0644	edit dl rm
network.py	13603	0644	edit dl rm
rw.py	3932	0644	edit dl rm
script.py	4261	0644	edit dl rm
semodule.py	1309	0644	edit dl rm
spec.py	2134	0644	edit dl rm
test_module.py	4449	0644	edit dl rm
tmp.py	3457	0644	edit dl rm
unit_file.py	2261	0644	edit dl rm
user.py	4313	0644	edit dl rm
var_cache.py	4152	0644	edit dl rm
var_lib.py	4299	0644	edit dl rm
var_log.py	3257	0644	edit dl rm
var_run.py	2931	0644	edit dl rm
var_spool.py	4142	0644	edit dl rm
__init__.py	724	0644	edit dl rm

Edit: /usr/lib/python3.6/site-packages/sepolicy/templates/unit_file.py (2261B)

# Copyright (C) 2012 Red Hat
# see file 'COPYING' for use and warranty information
#
# policygentool is a tool for the initial generation of SELinux policy
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of the GNU General Public License as
#    published by the Free Software Foundation; either version 2 of
#    the License, or (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program; if not, write to the Free Software
#    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
#                                        02111-1307  USA
#
#
########################### unit Template File #############################

########################### Type Enforcement File #############################
te_types="""
type TEMPLATETYPE_unit_file_t;
systemd_unit_file(TEMPLATETYPE_unit_file_t)
"""

te_rules=""

########################### Interface File #############################
if_rules="""\
########################################
## <summary>
##	Execute TEMPLATETYPE server in the TEMPLATETYPE domain.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed to transition.
##	</summary>
## </param>
#
interface(`TEMPLATETYPE_systemctl',`
	gen_require(`
		type TEMPLATETYPE_t;
		type TEMPLATETYPE_unit_file_t;
	')

systemd_exec_systemctl($1)
        systemd_read_fifo_file_passwd_run($1)
	allow $1 TEMPLATETYPE_unit_file_t:file read_file_perms;
	allow $1 TEMPLATETYPE_unit_file_t:service manage_service_perms;

ps_process_pattern($1, TEMPLATETYPE_t)
')

"""

if_admin_types="""
	type TEMPLATETYPE_unit_file_t;"""

if_admin_rules="""
	TEMPLATETYPE_systemctl($1)
	admin_pattern($1, TEMPLATETYPE_unit_file_t)
	allow $1 TEMPLATETYPE_unit_file_t:service all_service_perms;
"""

########################### File Context ##################################
fc_file="""\
FILENAME		--	gen_context(system_u:object_r:TEMPLATETYPE_unit_file_t,s0)
"""

fc_dir=""

# Copyright (C) 2012 Red Hat # see file 'COPYING' for use and warranty information # # policygentool is a tool for the initial generation of SELinux policy # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License as # published by the Free Software Foundation; either version 2 of # the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA # 02111-1307 USA # # ########################### unit Template File ############################# ########################### Type Enforcement File ############################# te_types=""" type TEMPLATETYPE_unit_file_t; systemd_unit_file(TEMPLATETYPE_unit_file_t) """ te_rules="" ########################### Interface File ############################# if_rules="""\ ######################################## ##

## Execute TEMPLATETYPE server in the TEMPLATETYPE domain. ##

## ##

## Domain allowed to transition. ##

## # interface(`TEMPLATETYPE_systemctl',` gen_require(` type TEMPLATETYPE_t; type TEMPLATETYPE_unit_file_t; ') systemd_exec_systemctl($1) systemd_read_fifo_file_passwd_run($1) allow $1 TEMPLATETYPE_unit_file_t:file read_file_perms; allow $1 TEMPLATETYPE_unit_file_t:service manage_service_perms; ps_process_pattern($1, TEMPLATETYPE_t) ') """ if_admin_types=""" type TEMPLATETYPE_unit_file_t;""" if_admin_rules=""" TEMPLATETYPE_systemctl($1) admin_pattern($1, TEMPLATETYPE_unit_file_t) allow $1 TEMPLATETYPE_unit_file_t:service all_service_perms; """ ########################### File Context ################################## fc_file="""\ FILENAME -- gen_context(system_u:object_r:TEMPLATETYPE_unit_file_t,s0) """ fc_dir=""