######################################## ## ## Marks the specified domain as SE-PostgreSQL server process. ## ## ## ## Domain to be marked ## ## # interface(`sepgsql_server_domain',` gen_require(` attribute sepgsql_server_type; ') typeattribute $1 sepgsql_server_type; ') ######################################## ## ## Allow the specified domain unconfined accesses to any database objects ## managed by SE-PostgreSQL, ## ## ## ## Domain allowed access. ## ## # interface(`sepgsql_unconfined_domain',` gen_require(` attribute sepgsql_unconfined_type; attribute sepgsql_client_type; ') typeattribute $1 sepgsql_unconfined_type; typeattribute $1 sepgsql_client_type; ') ######################################## ## ## Allow the specified domain unprivileged accesses to any database objects ## managed by SE-PostgreSQL, ## ## ## ## Domain allowed access. ## ## # interface(`sepgsql_client_domain',` gen_require(` attribute sepgsql_client_type; ') typeattribute $1 sepgsql_client_type; ') ######################################## ## ## Allow the specified role to invoke trusted procedures ## ## ## ## The role associated with the domain. ## ## # interface(`sepgsql_trusted_procedure_role',` gen_require(` type sepgsql_trusted_domain_t; ') role $1 types sepgsql_trusted_domain_t; ') ######################################## ## ## Marks as a SE-PostgreSQL loadable shared library module ## ## ## ## Type marked as a database object type. ## ## # interface(`sepgsql_loadable_module',` gen_require(` attribute sepgsql_module_type; ') typeattribute $1 sepgsql_module_type; ')