########################################
##
## Marks the specified domain as SE-PostgreSQL server process.
##
##
##
## Domain to be marked
##
##
#
interface(`sepgsql_server_domain',`
gen_require(`
attribute sepgsql_server_type;
')
typeattribute $1 sepgsql_server_type;
')
########################################
##
## Allow the specified domain unconfined accesses to any database objects
## managed by SE-PostgreSQL,
##
##
##
## Domain allowed access.
##
##
#
interface(`sepgsql_unconfined_domain',`
gen_require(`
attribute sepgsql_unconfined_type;
attribute sepgsql_client_type;
')
typeattribute $1 sepgsql_unconfined_type;
typeattribute $1 sepgsql_client_type;
')
########################################
##
## Allow the specified domain unprivileged accesses to any database objects
## managed by SE-PostgreSQL,
##
##
##
## Domain allowed access.
##
##
#
interface(`sepgsql_client_domain',`
gen_require(`
attribute sepgsql_client_type;
')
typeattribute $1 sepgsql_client_type;
')
########################################
##
## Allow the specified role to invoke trusted procedures
##
##
##
## The role associated with the domain.
##
##
#
interface(`sepgsql_trusted_procedure_role',`
gen_require(`
type sepgsql_trusted_domain_t;
')
role $1 types sepgsql_trusted_domain_t;
')
########################################
##
## Marks as a SE-PostgreSQL loadable shared library module
##
##
##
## Type marked as a database object type.
##
##
#
interface(`sepgsql_loadable_module',`
gen_require(`
attribute sepgsql_module_type;
')
typeattribute $1 sepgsql_module_type;
')