Chris PeBenito 9570b2
policy_module(tcpd, 1.4.0)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
########################################
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
# Declarations
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
type tcpd_t;
Chris PeBenito 17de1b
type tcpd_exec_t;
Chris PeBenito 8242f5
inetd_tcp_service_domain(tcpd_t, tcpd_exec_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
type tcpd_tmp_t;
Chris PeBenito 17de1b
files_tmp_file(tcpd_tmp_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
########################################
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
# Local policy
Chris PeBenito 17de1b
#
Chris PeBenito 17de1b
allow tcpd_t self:tcp_socket create_stream_socket_perms;
Chris PeBenito 17de1b
Chris PeBenito 8242f5
manage_dirs_pattern(tcpd_t, tcpd_tmp_t, tcpd_tmp_t)
Chris PeBenito 8242f5
manage_files_pattern(tcpd_t, tcpd_tmp_t, tcpd_tmp_t)
Chris PeBenito 17de1b
files_tmp_filetrans(tcpd_t, tcpd_tmp_t, { file dir })
Chris PeBenito 17de1b
Chris PeBenito 190066
corenet_all_recvfrom_unlabeled(tcpd_t)
Chris PeBenito 190066
corenet_all_recvfrom_netlabel(tcpd_t)
Chris PeBenito 668b30
corenet_tcp_sendrecv_generic_if(tcpd_t)
Chris PeBenito c12621
corenet_tcp_sendrecv_generic_node(tcpd_t)
Chris PeBenito 17de1b
corenet_tcp_sendrecv_all_ports(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
fs_getattr_xattr_fs(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
# Run other daemons in the inetd child domain.
Chris PeBenito 17de1b
corecmd_search_bin(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
files_read_etc_files(tcpd_t)
Chris PeBenito 17de1b
# no good reason for files_dontaudit_search_var, probably nscd
Chris PeBenito 17de1b
files_dontaudit_search_var(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
logging_send_syslog_msg(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
miscfiles_read_localization(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
sysnet_read_config(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
inetd_domtrans_child(tcpd_t)
Chris PeBenito 17de1b
Chris PeBenito 17de1b
optional_policy(`
Chris PeBenito 17de1b
	nis_use_ypbind(tcpd_t)
Chris PeBenito 17de1b
')