Blame policy/modules/services/zosremote.te
|
Chris PeBenito |
9570b2 |
policy_module(zosremote, 1.1.0)
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
########################################
|
|
Chris PeBenito |
3c9b2e |
#
|
|
Chris PeBenito |
3c9b2e |
# Declarations
|
|
Chris PeBenito |
3c9b2e |
#
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
type zos_remote_t;
|
|
Chris PeBenito |
3c9b2e |
type zos_remote_exec_t;
|
|
Chris PeBenito |
3c9b2e |
init_system_domain(zos_remote_t, zos_remote_exec_t)
|
|
Chris PeBenito |
3c9b2e |
logging_dispatcher_domain(zos_remote_t, zos_remote_exec_t)
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
########################################
|
|
Chris PeBenito |
3c9b2e |
#
|
|
Chris PeBenito |
3c9b2e |
# zos_remote local policy
|
|
Chris PeBenito |
3c9b2e |
#
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
allow zos_remote_t self:process signal;
|
|
Chris PeBenito |
3c9b2e |
allow zos_remote_t self:fifo_file rw_file_perms;
|
|
Chris PeBenito |
3c9b2e |
allow zos_remote_t self:unix_stream_socket create_stream_socket_perms;
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
files_read_etc_files(zos_remote_t)
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
26410d |
auth_use_nsswitch(zos_remote_t)
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
miscfiles_read_localization(zos_remote_t)
|
|
Chris PeBenito |
3c9b2e |
|
|
Chris PeBenito |
3c9b2e |
logging_send_syslog_msg(zos_remote_t)
|