Chris PeBenito 50824a
## <summary>Passive Asset Detection System</summary>
Chris PeBenito 50824a
## <desc>
Chris PeBenito 50824a
##	

Chris PeBenito 50824a
##	PADS is a libpcap based detection engine used to
Chris PeBenito 50824a
##	passively detect network assets.  It is designed to
Chris PeBenito 50824a
##	complement IDS technology by providing context to IDS
Chris PeBenito 50824a
##	alerts.
Chris PeBenito 50824a
##	

Chris PeBenito 50824a
## </desc>
Chris PeBenito 50824a
Chris PeBenito 50824a
########################################
Chris PeBenito 50824a
## <summary>
Chris PeBenito 50824a
##	All of the rules required to administrate 
Chris PeBenito 50824a
##	an pads environment
Chris PeBenito 50824a
## </summary>
Chris PeBenito 50824a
## <param name="domain">
Chris PeBenito 50824a
##	<summary>
Chris PeBenito 50824a
##	Domain allowed access.
Chris PeBenito 50824a
##	</summary>
Chris PeBenito 50824a
## </param>
Chris PeBenito 50824a
## <param name="role">
Chris PeBenito 50824a
##	<summary>
Chris PeBenito 50824a
##	Role allowed access.
Chris PeBenito 50824a
##	</summary>
Chris PeBenito 50824a
## </param>
Chris PeBenito 50824a
## <rolecap/>
Chris PeBenito 50824a
#
Dominick Grift 1976dd
interface(`pads_admin',`
Chris PeBenito 50824a
	gen_require(`
Dominick Grift 8f0b74
		type pads_t, pads_config_t, pads_initrc_exec_t;
Dominick Grift 8f0b74
		type pads_var_run_t;
Chris PeBenito 50824a
	')
Chris PeBenito 50824a
Chris PeBenito 50824a
	allow $1 pads_t:process { ptrace signal_perms };
Chris PeBenito 50824a
	ps_process_pattern($1, pads_t)
Chris PeBenito 50824a
Chris PeBenito 50824a
	init_labeled_script_domtrans($1, pads_initrc_exec_t)
Chris PeBenito 50824a
	domain_system_change_exemption($1)
Chris PeBenito 50824a
	role_transition $2 pads_initrc_exec_t system_r;
Chris PeBenito 50824a
	allow $2 system_r;
Chris PeBenito 50824a
Dominick Grift 61f406
	files_list_pids($1)
Chris PeBenito 50824a
	admin_pattern($1, pads_var_run_t)
Dominick Grift 1215df
Dominick Grift 61f406
	files_list_etc($1)
Chris PeBenito 50824a
	admin_pattern($1, pads_config_t)
Chris PeBenito 50824a
')