This repository has been archived on 2025-04-17. You can view files and clone it, but you cannot make any changes to it's state, such as pushing and creating new issues, pull requests or comments.
brave-selinux-policy/brave.if
2025-04-14 22:26:02 -07:00

113 lines
No EOL
2.1 KiB
Text

## <summary>brave browser</summary>
########################################
## <summary>
## Execute brave in the brave domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
interface(`brave_domtrans',`
gen_require(`
type brave_t, brave_exec_t;
')
domtrans_pattern($1, brave_exec_t, brave_t)
')
########################################
## <summary>
## Execute brave in the brave domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
## <summary>
## Role allowed access.
## </summary>
## </param>
#
interface(`brave_run',`
gen_require(`
type brave_t;
attribute_role brave_roles;
')
brave_domtrans($1)
roleattribute $2 brave_roles;
')
########################################
## <summary>
## Execute brave script in the brave script domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
interface(`brave_script_domtrans',`
gen_require(`
type brave_script_t, brave_script_exec_t;
')
domtrans_pattern($1, brave_script_exec_t, brave_script_t)
')
########################################
## <summary>
## Execute brave script in the brave script domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
## <param name="role">
## <summary>
## Role allowed access.
## </summary>
## </param>
#
interface(`brave_script_run',`
gen_require(`
type brave_script_t;
attribute_role brave_script_roles;
')
brave_script_domtrans($1)
roleattribute $2 brave_script_roles;
')
########################################
## <summary>
## Create brave directory in the user home directory
## with a correct label.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`brave_filetrans_home_content',`
gen_require(`
type brave_home_t;
')
optional_policy(`
gnome_config_filetrans($1, brave_home_t, dir, "brave")
gnome_cache_filetrans($1, brave_home_t, dir, "brave")
')
')