policy_module(razor,1.4.0)

########################################

#

# Declarations

#

type razor_t;

type razor_exec_t;

domain_type(razor_t)

domain_entry_file(razor_t,razor_exec_t)

role system_r types razor_t;

type razor_etc_t;

files_config_file(razor_etc_t)

type razor_log_t;

logging_log_file(razor_log_t)

type razor_var_lib_t;

files_type(razor_var_lib_t)

razor_common_domain_template(razor)

########################################

#

# Local policy

#

allow razor_t self:tcp_socket create_socket_perms;

manage_dirs_pattern(razor_t,razor_etc_t,razor_etc_t)

manage_files_pattern(razor_t,razor_etc_t,razor_etc_t)

manage_lnk_files_pattern(razor_t,razor_etc_t,razor_etc_t)

files_search_etc(razor_t)

allow razor_t razor_log_t:file manage_file_perms;

logging_log_filetrans(razor_t,razor_log_t,file)

manage_files_pattern(razor_t,razor_var_lib_t,razor_var_lib_t)

files_var_lib_filetrans(razor_t,razor_var_lib_t,file)

corenet_all_recvfrom_unlabeled(razor_t)

corenet_all_recvfrom_netlabel(razor_t)

corenet_tcp_sendrecv_generic_if(razor_t)

corenet_raw_sendrecv_generic_if(razor_t)

corenet_tcp_sendrecv_all_nodes(razor_t)

corenet_raw_sendrecv_all_nodes(razor_t)

corenet_tcp_sendrecv_razor_port(razor_t)

corenet_tcp_connect_razor_port(razor_t)

corenet_sendrecv_razor_client_packets(razor_t)

sysnet_read_config(razor_t)

optional_policy(`

	logging_send_syslog_msg(razor_t)

')

optional_policy(`

	nscd_socket_use(razor_t)

')