Chris PeBenito fee486
policy_module(certwatch, 1.5.2)
Chris PeBenito 2bcdbd
Chris PeBenito 2bcdbd
########################################
Chris PeBenito 2bcdbd
#
Chris PeBenito 2bcdbd
# Declarations
Chris PeBenito 2bcdbd
#
Chris PeBenito 2bcdbd
Chris PeBenito 2bcdbd
type certwatch_t;
Chris PeBenito 2bcdbd
type certwatch_exec_t;
Chris PeBenito 0bfccd
application_domain(certwatch_t, certwatch_exec_t)
Chris PeBenito 2bcdbd
role system_r types certwatch_t;
Chris PeBenito 2bcdbd
Chris PeBenito 2bcdbd
########################################
Chris PeBenito 2bcdbd
#
Chris PeBenito 2bcdbd
# Local policy
Chris PeBenito 2bcdbd
#
Chris PeBenito 12c61f
allow certwatch_t self:capability sys_nice;
Chris PeBenito 12c61f
allow certwatch_t self:process { setsched getsched };
Chris PeBenito 12c61f
Chris PeBenito 12c61f
dev_read_urand(certwatch_t)
Chris PeBenito 2bcdbd
Chris PeBenito 2bcdbd
files_read_etc_files(certwatch_t)
Chris PeBenito 12c61f
files_read_usr_files(certwatch_t)
Chris PeBenito 12c61f
files_read_usr_symlinks(certwatch_t)
Chris PeBenito 12c61f
files_list_tmp(certwatch_t)
Chris PeBenito 12c61f
Chris PeBenito 12c61f
fs_list_inotifyfs(certwatch_t)
Chris PeBenito 2bcdbd
Chris PeBenito 30425a
auth_manage_cache(certwatch_t)
Chris PeBenito 30425a
auth_var_filetrans_cache(certwatch_t)
Chris PeBenito 30425a
Chris PeBenito 2bcdbd
logging_send_syslog_msg(certwatch_t)
Chris PeBenito 2bcdbd
Chris PeBenito e9d6df
miscfiles_read_generic_certs(certwatch_t)
Chris PeBenito 2bcdbd
miscfiles_read_localization(certwatch_t)
Chris PeBenito 2bcdbd
Chris PeBenito 296273
userdom_use_user_terminals(certwatch_t)
Dan Walsh 3eaa99
userdom_dontaudit_list_admin_dir(certwatch_t)
Chris PeBenito 296273
Chris PeBenito 12c61f
optional_policy(`
Chris PeBenito 12c61f
	apache_exec_modules(certwatch_t)
Chris PeBenito 30425a
	apache_read_config(certwatch_t)
Chris PeBenito 12c61f
')
Chris PeBenito 2bcdbd
Chris PeBenito bb7170
optional_policy(`
Chris PeBenito 0bfccd
	cron_system_entry(certwatch_t, certwatch_exec_t)
Chris PeBenito 2bcdbd
')
Chris PeBenito 12c61f
Chris PeBenito 12c61f
optional_policy(`
Dan Walsh 3eaa99
	pcscd_domtrans(certwatch_t)
Chris PeBenito 12c61f
	pcscd_stream_connect(certwatch_t)
Chris PeBenito 12c61f
	pcscd_read_pub_files(certwatch_t)
Chris PeBenito 12c61f
')