Blame mls/domains/program/dictd.te
|
Chris PeBenito |
31b7c0 |
#DESC Dictd - Dictionary daemon
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# Authors: Russell Coker <russell@coker.com.au>
|
|
Chris PeBenito |
31b7c0 |
# X-Debian-Packages: dictd
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
#################################
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# Rules for the dictd_t domain.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
# dictd_exec_t is the type of the dictd executable.
|
|
Chris PeBenito |
31b7c0 |
#
|
|
Chris PeBenito |
31b7c0 |
daemon_base_domain(dictd)
|
|
Chris PeBenito |
31b7c0 |
type dictd_var_lib_t, file_type, sysadmfile;
|
|
Chris PeBenito |
31b7c0 |
typealias dictd_var_lib_t alias var_lib_dictd_t;
|
|
Chris PeBenito |
31b7c0 |
etc_domain(dictd)
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# for checking for nscd
|
|
Chris PeBenito |
31b7c0 |
dontaudit dictd_t var_run_t:dir search;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
# read config files
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t { etc_t etc_runtime_t }:file r_file_perms;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
read_locale(dictd_t)
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t { var_t var_lib_t }:dir search;
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t dictd_var_lib_t:dir r_dir_perms;
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t dictd_var_lib_t:file r_file_perms;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t self:capability { setuid setgid };
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t usr_t:file r_file_perms;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t self:process { setpgid fork sigchld };
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t proc_t:file r_file_perms;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t dict_port_t:tcp_socket name_bind;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t devtty_t:chr_file rw_file_perms;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t self:unix_stream_socket create_stream_socket_perms;
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
can_network_server(dictd_t)
|
|
Chris PeBenito |
31b7c0 |
can_ypbind(dictd_t)
|
|
Chris PeBenito |
31b7c0 |
can_tcp_connect(userdomain, dictd_t)
|
|
Chris PeBenito |
31b7c0 |
|
|
Chris PeBenito |
31b7c0 |
allow dictd_t fs_t:filesystem getattr;
|