Chris PeBenito fee486
policy_module(djbdns, 1.4.1)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
########################################
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
# Declarations
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
Chris PeBenito 17de1b
type djbdns_axfrdns_t;
Chris PeBenito 17de1b
type djbdns_axfrdns_exec_t;
Chris PeBenito 17de1b
domain_type(djbdns_axfrdns_t)
Chris PeBenito 0bfccd
domain_entry_file(djbdns_axfrdns_t, djbdns_axfrdns_exec_t)
Chris PeBenito 17de1b
role system_r types djbdns_axfrdns_t;
Jeremy Solt a83171
Jeremy Solt a83171
type djbdns_axfrdns_conf_t;
Chris PeBenito 17de1b
files_config_file(djbdns_axfrdns_conf_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
djbdns_daemontools_domain_template(dnscache)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
djbdns_daemontools_domain_template(tinydns)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
########################################
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
# Local policy for axfrdns component
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
Dan Walsh 3eaa99
files_config_file(djbdns_axfrdns_conf_t)
Dan Walsh 3eaa99
Chris PeBenito 17de1b
daemontools_ipc_domain(djbdns_axfrdns_t)
Chris PeBenito 17de1b
daemontools_read_svc(djbdns_axfrdns_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
allow djbdns_axfrdns_t self:capability { setuid setgid sys_chroot };
Chris PeBenito 17de1b
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_axfrdns_conf_t:dir list_dir_perms;
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_axfrdns_conf_t:file read_file_perms;
Chris PeBenito 17de1b
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_t:dir list_dir_perms;
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_t:file read_file_perms;
Chris PeBenito 17de1b
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_conf_t:dir list_dir_perms;
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_conf_t:file read_file_perms;
Chris PeBenito 17de1b
Chris PeBenito 17de1b
files_search_var(djbdns_axfrdns_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
ucspitcp_service_domain(djbdns_axfrdns_t, djbdns_axfrdns_exec_t)
Chris PeBenito 44b380
Chris PeBenito 44b380
########################################
Chris PeBenito 44b380
#
Chris PeBenito 44b380
# Local policy for tinydns
Chris PeBenito 44b380
#
Chris PeBenito 44b380
Chris PeBenito 44b380
init_dontaudit_use_script_fds(djbdns_tinydns_t)