diff --git a/common/public/te_macros b/common/public/te_macros index 2af4893de2365e86c8618396eb90483db77d5401..a43cd49a6ac9d417764d15037163ecd59aa75073 100644 --- a/common/public/te_macros +++ b/common/public/te_macros @@ -1,3 +1,21 @@ +##################################### +# rw_dir_file(domain, type) +# Allow the specified domain to read directories and read/write files +# and symbolic links of the specified type. +define(`rw_dir_file', ` +allow $1 $2:dir r_dir_perms; +allow $1 $2:{ file lnk_file } rw_file_perms; +') + +##################################### +# create_dir_file(domain, type) +# Allow the specified domain to read directories and create files +# and symbolic links of the specified type. +define(`create_dir_file', ` +allow $1 $2:dir r_dir_perms; +allow $1 $2:{ file lnk_file } create_file_perms; +') + ##################################### # hal_attribute_lineage(hal_name) define(`hal_attribute_lineage', `