selinux/mdp/mdp.c

68 		fprintf(fout, "class %s\n", secclass_map[i].name);
69 	fprintf(fout, "\n");
77 			fprintf(fout, "sid %s\n", name);
79 			fprintf(fout, "sid unused%d\n", i);
81 	fprintf(fout, "\n");
86 		fprintf(fout, "class %s\n", map->name);
87 		fprintf(fout, "{\n");
89 			fprintf(fout, "\t%s\n", map->perms[j]);
90 		fprintf(fout, "}\n\n");
92 	fprintf(fout, "\n");
96 		fprintf(fout, "sensitivity s0;\n");
97 		fprintf(fout, "sensitivity s1;\n");
98 		fprintf(fout, "dominance { s0 s1 }\n");
99 		fprintf(fout, "category c0;\n");
100 		fprintf(fout, "category c1;\n");
101 		fprintf(fout, "level s0:c0.c1;\n");
102 		fprintf(fout, "level s1:c0.c1;\n");
108 			fprintf(fout, "mlsconstrain %s {\n", map->name);
110 				fprintf(fout, "\t%s\n", map->perms[j]);
117 			fprintf(fout, "} (l2 eq h2 and h1 dom h2);\n\n");
123 		fprintf(fout, "policycap %s;\n", selinux_policycap_names[i]);
126 	fprintf(fout, "type base_t;\n");
127 	fprintf(fout, "role base_r;\n");
128 	fprintf(fout, "role base_r types { base_t };\n");
130 		fprintf(fout, "allow base_t base_t:%s *;\n",
132 	fprintf(fout, "user user_u roles { base_r }");
134 		fprintf(fout, " level %s range %s - %s", SYSTEMLOW,
136 	fprintf(fout, ";\n");
146 			fprintf(fout, "sid %s ", name);
148 			fprintf(fout, "sid unused%d\n", i);
149 		fprintf(fout, SUBJUSERROLETYPE "%s\n",
152 	fprintf(fout, "\n");
155 	fprintf(fout, "fs_use_%s %s " OBJUSERROLETYPE "%s;\n", \
229 	fprintf(fout, "genfscon %s %s " OBJUSERROLETYPE "%s\n", \
268 	fprintf(fout, "/ " OBJUSERROLETYPE "%s\n", mls ? ":" SYSTEMLOW : "");
269 	fprintf(fout, "/.* " OBJUSERROLETYPE "%s\n", mls ? ":" SYSTEMLOW : "");