+
     hD  c                   s`    R RRRRR RR!RR"R
R#RR$RR%RR&RR'/
t RRRRRRRRRRRRRRR	RRR/	tR tR# )(Zadmin_commands_t_r_sudo_tZgraphical_login_dbus_tZmozilla_usageZ
networkingZsecurity_advanced_userhelper_tZsecurity_basicZsudo_sudo_tmp_tZ
user_login_gkeyringd_t_exec_contentZssh_connect_ssh_agent_tZbasic_commandsz(type {}_t)z(role {}_r)z(type {}_dbus_t)z(type {}_gkeyringd_t)z(type {}_ssh_agent_t)z(type {}_sudo_t)z(type {}_sudo_tmp_t)z(type {}_userhelper_t)z(boolean {}_exec_content true)c                 sr   V R ,          pRpRV R ,          9   d   V R ,          P                  R4      w  rRV9   d   VP                  R4      w  r4MTpTpVR8w  d>   RV9   d&   VP                  R4      w  rVRP                  WV4      pMRP                  V4      pRP                  W4V4      p\        4       pRP                  V R	,          V R
,          VR7      p	V P                  4        F  w  rV'       d   V
\        P                  4       9  d   K(  \        V
,          ^,           F5  pVP                  \        V,          P                  V R	,          4      4       K7  	  T	R\        V
,          ^ ,          P                  RP                  \        V
,          ^,           Uu. uF  qR	,          V,           NK  	  up4      4      ,           ,          p	K  	  RP                  \        V4      4      V	,           p	\        RP                  V R	,          4      R4      ;_uu_ 4       pVP                  V	4       RRR4       \        RP                  V R	,          4      4       \        R4       \        R4       \        RP                  V R	,          4      4       \        R4       \        RP                  V R	,          V R	,          4      4       \        R4       \        RP                  V R	,          V R	,          4      4       \        R4       \        RP                  V R	,          4      4       R# u upi   + '       g   i     EL; i)rangeZ Z:Z-Z.z(range {} {})z({})z({} ) ({} {})zq
(user {uname}_u)
(userrole {uname}_u {uname}_r)
(userlevel {uname}_u ({level}))
(userrange {uname}_u ({range}))
unamelevel)r
   r   r	   Z
Z z{}.cilZwNzCreated {}.cilz3Run the following commands to apply the new policy:zInstall the new policy modulezE# semodule -i {}.cil /usr/share/udica/macros/confined_user_macros.cilz.Create a default context file for the new userur   # sed -e ’s|user|{}|g’ /etc/selinux/targeted/contexts/users/user_u > /etc/selinux/targeted/contexts/users/{}_uz4Map the new selinux user to an existing user accountz# semanage login -a -s {}_u {}z'Fix labels in the user's home directoryz# restorecon -RvF /home/{})ZsplitZformatZsetZitemsMACRO_CALLSZkeysZadd	TYPE_DEFSZjoinZsortedZopenZwriteZprint)ZoptsZ	mls_rangeZ	mcs_rangeZrange_lZrange_hZmcs_range_lZmcs_range_hr	   ZdefsZpolicyZargZvalueZparamZsZfs   &              8/usr/lib/python3.14/site-packages/udica/confined_user.pycreate_confined_user_policyr   <   s    WII
d7m!%g!4!4S!9
i&__S1' B))2)=&['..{HI i0I""7Y?E5D
 F7m4=    jjl
;#3#3#55 %a((EHHYu%,,T'];< )$Q&&[5Ea5HI5Hw-!++5HIJ
 	
 # YYvd|$v-F	hood7m,c	2	2a	 
3 


!
!$w-
01	
?@	
)*	OVVM	

 

:;	|  	D  	DM4=	

 

@A	
*
1
1$w-g
OP	
34	
&
-
-d7m
<=7 J 
3	2	2s   L L%%L6	N)z+(call confinedom_admin_commands_macro ({})))r    r   r   )z,(call confinedom_graphical_login_macro ({})))r    r   r   )z*(call confinedom_mozilla_usage_macro ({}))r    r   )z'(call confinedom_networking_macro ({}))r   )z.(call confinedom_security_advanced_macro ({})))r    r   r   r   )z+(call confinedom_security_basic_macro ({}))r   )z!(call confinedom_sudo_macro ({})))r    r   r   r   )z'(call confinedom_user_login_macro ({})))r    r   r   r   r   )z&(call confined_ssh_connect_macro ({})))r    r   r   )z-(call confined_use_basic_commands_macro ({}))r   )r   r   r   )     r   <module>r      s   "     QK  S
      U9@ 	--!++!)-5
	J>r   