Blame policy/modules/services/zosremote.if
|
Chris PeBenito |
3c9b2e |
## <summary>policy for z/OS Remote-services Audit dispatcher plugin</summary>
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
########################################
|
|
Chris PeBenito |
3c9b2e |
## <summary>
|
|
Chris PeBenito |
3f67f7 |
## Execute a domain transition to run audispd-zos-remote.
|
|
Chris PeBenito |
3c9b2e |
## </summary>
|
|
Chris PeBenito |
3c9b2e |
## <param name="domain">
|
|
Chris PeBenito |
3c9b2e |
## <summary>
|
|
Chris PeBenito |
3f67f7 |
## Domain allowed to transition.
|
|
Chris PeBenito |
3c9b2e |
## </summary>
|
|
Chris PeBenito |
3c9b2e |
## </param>
|
|
Chris PeBenito |
3c9b2e |
#
|
|
Chris PeBenito |
3c9b2e |
interface(`zosremote_domtrans',`
|
|
Chris PeBenito |
3f67f7 |
gen_require(`
|
|
Chris PeBenito |
3f67f7 |
type zos_remote_t, zos_remote_exec_t;
|
|
Chris PeBenito |
3f67f7 |
')
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3f67f7 |
domtrans_pattern($1, zos_remote_exec_t, zos_remote_t)
|
|
Chris PeBenito |
3c9b2e |
')
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
########################################
|
|
Chris PeBenito |
3c9b2e |
## <summary>
|
|
Chris PeBenito |
3c9b2e |
## Allow specified type and role to transition and
|
|
Chris PeBenito |
3c9b2e |
## run in the zos_remote_t domain. Allow specified type
|
|
Chris PeBenito |
3c9b2e |
## to use zos_remote_t terminal.
|
|
Chris PeBenito |
3c9b2e |
## </summary>
|
|
Chris PeBenito |
3c9b2e |
## <param name="domain">
|
|
Chris PeBenito |
3c9b2e |
## <summary>
|
|
Dominick Grift |
288845 |
## Domain allowed to transition.
|
|
Chris PeBenito |
3c9b2e |
## </summary>
|
|
Chris PeBenito |
3c9b2e |
## </param>
|
|
Chris PeBenito |
3c9b2e |
## <param name="role">
|
|
Chris PeBenito |
3c9b2e |
## <summary>
|
|
Chris PeBenito |
a7ee7f |
## Role allowed access.
|
|
Chris PeBenito |
3c9b2e |
## </summary>
|
|
Chris PeBenito |
3c9b2e |
## </param>
|
|
Chris PeBenito |
3c9b2e |
#
|
|
Chris PeBenito |
3c9b2e |
interface(`zosremote_run',`
|
|
Chris PeBenito |
3c9b2e |
gen_require(`
|
|
Chris PeBenito |
3c9b2e |
type zos_remote_t;
|
|
Chris PeBenito |
3c9b2e |
')
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
zosremote_domtrans($1)
|
|
Chris PeBenito |
3c9b2e |
role $2 types zos_remote_t;
|
|
Chris PeBenito |
3c9b2e |
')
|