summaryrefslogtreecommitdiffstats
path: root/pam_selinux_roles/pam_selinux_roles_example_policy.xml
blob: a2b341d6947fc36b5ab10c883e60e70afe254a87 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
<?xml version="1.0" encoding="UTF-8"?>
<ipa xmlns="http://freeipa.org/xml/rng/pam_selinux_roles/1.0"> 
  <metadata>
    <name>simple selinux_roles example</name>
    <author>sbose@redhat.com</author>
    <version>0.7071</version>
    <RNGfile>pam_selinux_roles.rng</RNGfile>
    <XSLTfile>pam_selinux_roles.xslt</XSLTfile>
    <app>pam_selinux_roles</app>
  </metadata>

  <iparole>
    <role>
      <name>guest</name>
      <default_context>
        <selinux_user>guest_u</selinux_user>
        <mls>S0</mls>
      </default_context>
    </role>

    <role>
      <name>user</name>
      <default_context>
        <selinux_user>guest_u</selinux_user>
        <mls>S0</mls>
      </default_context>
      <context>
        <service>ssh</service>
        <service>console</service>
        <selinux_user>user_u</selinux_user>
        <mls>S0</mls>
      </context>
    </role>

    <role>
      <name>admin</name>
      <default_context>
        <selinux_user>guest_u</selinux_user>
        <mls>S0</mls>
      </default_context>
      <context>
        <service>ssh</service>
        <selinux_user>staff_u</selinux_user>
        <mls>S0</mls>
      </context>
      <context>
        <service>console</service>
        <selinux_user>staff_u</selinux_user>
        <mls>S0-S15</mls>
      </context>
    </role>
  </iparole>

</ipa>