NB RefPolicy - Revision history

Jaxelson at 20:49, 13 September 2010

Jaxelson — Mon, 13 Sep 2010 20:49:26 GMT

RichardHaines — Fri, 21 May 2010 14:51:25 GMT

←Older revision		Revision as of 14:51, 21 May 2010
Line 1,579:		Line 1,579:
	category c0;		category c0;
	....		....
-	}
-	</pre>
-
-	==== gen_require Macro ====
-	For use within module files to insert a <tt>require</tt> block.
-
-	'''The macro definition is:'''
-	<pre>
-	gen_require(`require_statements`)
-	</pre>
-	'''Where:'''
-
-	{\| border="1"
-	\| gen_require
-	\| The gen_require macro keyword.
-
-	\|-
-	\| require_statements
-	\| These statements consist of those allowed in the policy language require Statement.
-
-	\|}
-
-	'''The macro is valid in:'''
-
-	{\| border="1"
-	\| <center>Private Policy File (.te)</center>
-	\| <center>External Interface File (.if)</center>
-	\| <center>File Labeling Policy File (.fc)</center>
-
-	\|-
-	\| <center>'''Yes'''</center>
-	\| <center>'''Yes'''</center>
-	\| <center>'''No'''</center>
-
-	\|}
-
-	'''Example Macro:'''
-	<pre>
-	# This example is from the modules/services/ftp.te module:
-	#
-	gen_require(`type ftp_script_exec_t;')
-	</pre>
-	'''Expanded Macro:'''
-	<pre>
-	# This is the expanded macro from the tmp/ftp.tmp file:
-	#
-	require {
-	type ftp_script_exec_t;
	}		}
	</pre>		</pre>

RichardHaines — Fri, 21 May 2010 14:46:32 GMT

template Macro

←Older revision		Revision as of 14:46, 21 May 2010
Line 2,035:		Line 2,035:
	* A template interface allows an application to be run in a domain based on user / role information to isolate different instances.		* A template interface allows an application to be run in a domain based on user / role information to isolate different instances.

-	Note that the comments shown in the example MUST be present as they are used to describe the function and are extracted for the [[NB_RefPolicy#Reference_Policy_Documentation \| documentation].	+	Note that the comments shown in the example MUST be present as they are used to describe the function and are extracted for the [[NB_RefPolicy#Reference_Policy_Documentation \| documentation]].

	'''The macro definition is:'''		'''The macro definition is:'''

RichardHaines — Fri, 21 May 2010 14:46:00 GMT

Source Layout

←Older revision		Revision as of 14:46, 21 May 2010
Line 229:		Line 229:
	The following sections detail the source contents:		The following sections detail the source contents:

-	* [[NB_RefPolicy#Reference_Policy_Files_and_Directories \| Reference Policy Files and Directories[] - Describes the files and their location.	+	* [[NB_RefPolicy#Reference_Policy_Files_and_Directories \| Reference Policy Files and Directories]] - Describes the files and their location.
	* [[NB_RefPolicy#Source_Configuration_Files \| Source Configuration Files]] - Details the contents of the build.conf and modules.conf configuration files.		* [[NB_RefPolicy#Source_Configuration_Files \| Source Configuration Files]] - Details the contents of the build.conf and modules.conf configuration files.
	* [[NB_RefPolicy#Source_Installation_and_Build_Make_Options \| Source Installation and Build Make Options]] - Describes the <tt>make</tt> targets.		* [[NB_RefPolicy#Source_Installation_and_Build_Make_Options \| Source Installation and Build Make Options]] - Describes the <tt>make</tt> targets.

RichardHaines — Fri, 21 May 2010 14:43:49 GMT

gen_sens Macro

←Older revision		Revision as of 14:43, 21 May 2010
Line 2,517:		Line 2,517:

	'''Expanded Macro:'''		'''Expanded Macro:'''
-	<~~prr~~>	+	<pre>
	# This example has been extracted from the base.conf source		# This example has been extracted from the base.conf source
	# file.		# file.

RichardHaines — Fri, 21 May 2010 14:42:37 GMT

gen_bool Macro

←Older revision		Revision as of 14:42, 21 May 2010
Line 2,340:		Line 2,340:
	# Use the boolean in the module files with an if Statement as shown in the example.		# Use the boolean in the module files with an if Statement as shown in the example.

-	Note that the comments shown in the example MUST be present as they are used to describe the function and are extracted for the [#~~8.2.4.~~Reference Policy Documentation\|~~outline~~ documentation].	+	Note that the comments shown in the example MUST be present as they are used to describe the function and are extracted for the [[NB_RefPolicy#Reference Policy Documentation \| documentation]].

	'''The macro definition is:'''		'''The macro definition is:'''
Line 2,384:		Line 2,384:
	#		#

-	## <desc>## <p>## Disable transitions to insmod.## </p>## </desc>gen_bool(secure_mode_insmod,false)	+	## <desc>
		+	## <p>
		+	## Disable transitions to insmod.
		+	## </p>
		+	## </desc>gen_bool(secure_mode_insmod,false)

	# Example usage from the system/modutils.te module:		# Example usage from the system/modutils.te module:
Line 2,394:		Line 2,398:

	'''Expanded Macro:'''		'''Expanded Macro:'''
-	<pre.	+	<pre>
	# This has been taken from the base.conf source file after		# This has been taken from the base.conf source file after
	# expansion by the build process of the modutils.te module.		# expansion by the build process of the modutils.te module.

RichardHaines — Fri, 21 May 2010 14:37:47 GMT

optional_policy Macro

←Older revision		Revision as of 14:37, 21 May 2010
Line 1,693:		Line 1,693:
	\|-		\|-
	\| optional_statements		\| optional_statements
-	\| These statements consist of those allowed in the policy language optional Statement. However they can also be [[~~RefPolicy~~#interface_Macro \| interface]], [[~~RefPolicy~~#template_Macro \| template]] or support macro calls.	+	\| These statements consist of those allowed in the policy language optional Statement. However they can also be [[NB_RefPolicy#interface_Macro \| interface]], [[NB_RefPolicy#template_Macro \| template]] or support macro calls.

	\|}		\|}

RichardHaines — Fri, 21 May 2010 14:34:50 GMT

tunable_policy Macro

RichardHaines — Fri, 21 May 2010 14:34:03 GMT

gen_tunable Macro

←Older revision		Revision as of 14:34, 21 May 2010
Line 1,796:		Line 1,796:
	<pre>		<pre>
	gen_tunable(boolean_name,boolean_value)		gen_tunable(boolean_name,boolean_value)
-	</pre	+	</pre>
		+
	'''Where:'''		'''Where:'''

RichardHaines — Fri, 21 May 2010 14:33:14 GMT

optional_policy Macro

←Older revision		Revision as of 14:33, 21 May 2010
Line 1,693:		Line 1,693:
	\|-		\|-
	\| optional_statements		\| optional_statements
-	\| These statements consist of those allowed in the policy language optional Statement. However they can also be [#~~8.6.1.6.interface Macro~~\|~~outline~~ interface], [#~~8.6.1.7.template Macro~~\|~~outline~~ template] or support macro calls.	+	\| These statements consist of those allowed in the policy language optional Statement. However they can also be [[RefPolicy#interface_Macro \| interface]], [[RefPolicy#template_Macro \| template]] or support macro calls.

	\|}		\|}
Line 1,728:		Line 1,728:

	'''Expanded Macro:'''		'''Expanded Macro:'''
-		+	<pre>
	# This is the expanded macro from the tmp/ftp.tmp file showing		# This is the expanded macro from the tmp/ftp.tmp file showing
	# the policy language statements with both optional levels		# the policy language statements with both optional levels