Chris PeBenito 17ec8c
policy_module(netlabel, 1.3.0)
Chris PeBenito 130f8a
Chris PeBenito 130f8a
########################################
Chris PeBenito 130f8a
#
Chris PeBenito 130f8a
# Declarations
Chris PeBenito 130f8a
#
Chris PeBenito 130f8a
Chris PeBenito 130f8a
type netlabel_mgmt_t;
Chris PeBenito 130f8a
type netlabel_mgmt_exec_t;
Chris PeBenito 3f67f7
application_domain(netlabel_mgmt_t, netlabel_mgmt_exec_t)
Chris PeBenito 556556
role system_r types netlabel_mgmt_t;
Chris PeBenito 130f8a
Chris PeBenito 130f8a
########################################
Chris PeBenito 130f8a
#
Chris PeBenito 130f8a
# NetLabel Management Tools Local policy
Chris PeBenito 130f8a
#
Chris PeBenito 130f8a
Chris PeBenito 130f8a
# modify the network subsystem configuration
Chris PeBenito 130f8a
allow netlabel_mgmt_t self:capability net_admin;
Chris PeBenito 130f8a
allow netlabel_mgmt_t self:netlink_socket create_socket_perms;
Chris PeBenito 130f8a
Chris PeBenito 130f8a
kernel_read_network_state(netlabel_mgmt_t)
Chris PeBenito 130f8a
Chris PeBenito 0a0b80
files_read_etc_files(netlabel_mgmt_t)
Chris PeBenito 0a0b80
Chris PeBenito 130f8a
seutil_use_newrole_fds(netlabel_mgmt_t)
Chris PeBenito 296273
Chris PeBenito 296273
userdom_use_user_terminals(netlabel_mgmt_t)