usbguard.if

# Copyright (C) 2018 Thomas Mueller
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.


########################################
## <summary>
##	Allow the specified domain to access the usbguard ipc.
## </summary>
## <param name="domain">
##	<summary>
##	Domain allowed access.
##	</summary>
## </param>
## <rolecap/>
#
interface(`usbguard_ipc_access',`
	gen_require(`
		type usbguard_t;
		type usbguard_tmpfs_t;
	')

	allow $1 usbguard_t:unix_stream_socket connectto;
	allow $1 usbguard_tmpfs_t:file { open read write };
')