Chris PeBenito a5ef55
policy_module(pingd, 1.0.0)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
########################################
Chris PeBenito a5ef55
#
Chris PeBenito a5ef55
# Declarations
Chris PeBenito a5ef55
#
Chris PeBenito a5ef55
Chris PeBenito a5ef55
type pingd_t;
Chris PeBenito a5ef55
type pingd_exec_t;
Chris PeBenito a5ef55
init_daemon_domain(pingd_t, pingd_exec_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
# type for config
Chris PeBenito a5ef55
type pingd_etc_t;
Chris PeBenito 26410d
files_type(pingd_etc_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
type pingd_initrc_exec_t;
Chris PeBenito a5ef55
init_script_file(pingd_initrc_exec_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
# type for pingd modules
Chris PeBenito a5ef55
type pingd_modules_t;
Chris PeBenito a5ef55
files_type(pingd_modules_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
########################################
Chris PeBenito a5ef55
#
Chris PeBenito a5ef55
# pingd local policy
Chris PeBenito a5ef55
#
Chris PeBenito a5ef55
Chris PeBenito a5ef55
allow pingd_t self:capability net_raw;
Chris PeBenito a5ef55
allow pingd_t self:tcp_socket create_stream_socket_perms;
Dominick Grift 0f7c40
allow pingd_t self:rawip_socket create_socket_perms;
Chris PeBenito a5ef55
Chris PeBenito a5ef55
read_files_pattern(pingd_t, pingd_etc_t, pingd_etc_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
read_files_pattern(pingd_t, pingd_modules_t, pingd_modules_t)
Chris PeBenito a5ef55
mmap_files_pattern(pingd_t, pingd_modules_t, pingd_modules_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
corenet_raw_bind_generic_node(pingd_t)
Chris PeBenito a5ef55
corenet_tcp_bind_generic_node(pingd_t)
Chris PeBenito a5ef55
corenet_tcp_bind_pingd_port(pingd_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
auth_use_nsswitch(pingd_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
files_search_usr(pingd_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
logging_send_syslog_msg(pingd_t)
Chris PeBenito a5ef55
Chris PeBenito a5ef55
miscfiles_read_localization(pingd_t)