1<!ELEMENT busconfig (user |
2                     type |
3                     fork |
4                     keep_umask |
5                     listen |
6                     pidfile |
7                     includedir |
8                     servicedir |
9                     servicehelper |
10                     auth |
11                     include |
12                     policy |
13                     limit |
14                     selinux |
15                     apparmor)*>
16
17<!ELEMENT user (#PCDATA)>
18<!ELEMENT listen (#PCDATA)>
19<!ELEMENT includedir (#PCDATA)>
20<!ELEMENT servicedir (#PCDATA)>
21<!ELEMENT servicehelper (#PCDATA)>
22<!ELEMENT auth (#PCDATA)>
23<!ELEMENT type (#PCDATA)>
24<!ELEMENT pidfile (#PCDATA)>
25<!ELEMENT fork EMPTY>
26<!ELEMENT keep_umask EMPTY>
27
28<!ELEMENT include (#PCDATA)>
29<!ATTLIST include
30          ignore_missing (yes|no) "no"
31          if_selinux_enabled (yes|no) "no"
32          selinux_root_relative (yes|no) "no">
33
34<!ELEMENT policy (allow|deny)*>
35<!ATTLIST policy
36          context (default|mandatory) #IMPLIED
37          user CDATA #IMPLIED
38          group CDATA #IMPLIED
39          at_console (yes|no) #IMPLIED>
40
41<!ELEMENT allow EMPTY>
42<!ATTLIST allow
43          user CDATA #IMPLIED
44          send CDATA #IMPLIED
45          receive CDATA #IMPLIED
46          own CDATA #IMPLIED
47          send_to CDATA #IMPLIED
48          receive_from CDATA #IMPLIED>
49
50<!ELEMENT deny EMPTY>
51<!ATTLIST deny
52          user CDATA #IMPLIED
53          send CDATA #IMPLIED
54          receive CDATA #IMPLIED
55          own CDATA #IMPLIED
56          send_to CDATA #IMPLIED
57          receive_from CDATA #IMPLIED>
58
59<!ELEMENT limit (#PCDATA)>
60<!ATTLIST limit name CDATA #REQUIRED>
61
62<!ELEMENT selinux (associate)*>
63<!ELEMENT associate EMPTY>
64<!ATTLIST associate
65          own CDATA #REQUIRED
66          context CDATA #REQUIRED>
67
68<!ELEMENT apparmor EMPTY>
69<!ATTLIST apparmor
70          mode (required|enabled|disabled) "enabled">
71