Chris PeBenito 17de1b
Chris PeBenito a52b4d
policy_module(djbdns,1.1.0)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
########################################
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
# Declarations
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
Chris PeBenito 17de1b
type djbdns_axfrdns_t;
Chris PeBenito 17de1b
type djbdns_axfrdns_exec_t;
Chris PeBenito 17de1b
type djbdns_axfrdns_conf_t;
Chris PeBenito 17de1b
domain_type(djbdns_axfrdns_t)
Chris PeBenito 17de1b
domain_entry_file(djbdns_axfrdns_t,djbdns_axfrdns_exec_t)
Chris PeBenito 17de1b
role system_r types djbdns_axfrdns_t;
Chris PeBenito 17de1b
files_config_file(djbdns_axfrdns_conf_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
djbdns_daemontools_domain_template(dnscache)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
djbdns_daemontools_domain_template(tinydns)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
########################################
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
# Local policy for axfrdns component
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
Chris PeBenito 17de1b
files_config_file(djbdns_axfrdns_conf_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
daemontools_ipc_domain(djbdns_axfrdns_t)
Chris PeBenito 17de1b
daemontools_read_svc(djbdns_axfrdns_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
allow djbdns_axfrdns_t self:capability { setuid setgid sys_chroot };
Chris PeBenito 17de1b
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_axfrdns_conf_t:dir list_dir_perms;
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_axfrdns_conf_t:file read_file_perms;
Chris PeBenito 17de1b
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_t:dir list_dir_perms;
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_t:file read_file_perms;
Chris PeBenito 17de1b
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_conf_t:dir list_dir_perms;
Chris PeBenito c0868a
allow djbdns_axfrdns_t djbdns_tinydns_conf_t:file read_file_perms;
Chris PeBenito 17de1b
Chris PeBenito 17de1b
files_search_var(djbdns_axfrdns_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
libs_use_ld_so(djbdns_axfrdns_t)
Chris PeBenito 17de1b
libs_use_shared_libs(djbdns_axfrdns_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
ucspitcp_service_domain(djbdns_axfrdns_t, djbdns_axfrdns_exec_t)