Chris PeBenito 853692
## <summary>Tripwire file integrity checker.</summary>
Chris PeBenito 853692
## <desc>
Chris PeBenito 853692
##	

Chris PeBenito 853692
##	Tripwire file integrity checker.
Chris PeBenito 853692
##	

Chris PeBenito 853692
##	

Chris PeBenito 853692
##	NOTE: Tripwire creates temp file in its current working directory.
Chris PeBenito 853692
##	This policy does not allow write access to home directories, so
Chris PeBenito 853692
##	users will need to either cd to a directory where they have write
Chris PeBenito 853692
##	permission, or set the TEMPDIRECTORY variable in the tripwire config
Chris PeBenito 853692
##	file.  The latter is preferable, as then the file_type_auto_trans
Chris PeBenito 853692
##	rules will kick in and label the files as private to tripwire.
Chris PeBenito 853692
##	

Chris PeBenito 853692
## </desc>
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute tripwire in the tripwire domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_domtrans_tripwire',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type tripwire_t, tripwire_exec_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	domain_auto_trans($1,tripwire_exec_t,tripwire_t)
Chris PeBenito 853692
	allow tripwire_t $1:fd use;
Chris PeBenito 853692
	allow tripwire_t $1:fifo_file rw_file_perms;
Chris PeBenito 853692
	allow tripwire_t $1:process sigchld;
Chris PeBenito 853692
')
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute tripwire in the tripwire domain, and
Chris PeBenito 853692
##	allow the specified role the tripwire domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="role">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The role to be allowed the tripwire domain.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="terminal">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The type of the terminal allow the tripwire domain to use.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_run_tripwire',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type tripwire_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	tripwire_domtrans_tripwire($1)
Chris PeBenito 853692
	role $2 types tripwire_t;
Chris PeBenito 853692
	allow tripwire_t $3:chr_file rw_term_perms;
Chris PeBenito 853692
')
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute twadmin in the twadmin domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_domtrans_twadmin',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type twadmin_t, twadmin_exec_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	domain_auto_trans($1,twadmin_exec_t,twadmin_t)
Chris PeBenito 853692
	allow twadmin_t $1:fd use;
Chris PeBenito 853692
	allow twadmin_t $1:fifo_file rw_file_perms;
Chris PeBenito 853692
	allow twadmin_t $1:process sigchld;
Chris PeBenito 853692
')
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute twadmin in the twadmin domain, and
Chris PeBenito 853692
##	allow the specified role the twadmin domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="role">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The role to be allowed the twadmin domain.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="terminal">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The type of the terminal allow the twadmin domain to use.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_run_twadmin',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type twadmin_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	tripwire_domtrans_twadmin($1)
Chris PeBenito 853692
	role $2 types twadmin_t;
Chris PeBenito 853692
	allow twadmin_t $3:chr_file rw_term_perms;
Chris PeBenito 853692
')
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute twprint in the twprint domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_domtrans_twprint',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type twprint_t, twprint_exec_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	domain_auto_trans($1,twprint_exec_t,twprint_t)
Chris PeBenito 853692
	allow twprint_t $1:fd use;
Chris PeBenito 853692
	allow twprint_t $1:fifo_file rw_file_perms;
Chris PeBenito 853692
	allow twprint_t $1:process sigchld;
Chris PeBenito 853692
')
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute twprint in the twprint domain, and
Chris PeBenito 853692
##	allow the specified role the twprint domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="role">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The role to be allowed the twprint domain.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="terminal">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The type of the terminal allow the twprint domain to use.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_run_twprint',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type twprint_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	tripwire_domtrans_twprint($1)
Chris PeBenito 853692
	role $2 types twprint_t;
Chris PeBenito 853692
	allow twprint_t $3:chr_file rw_term_perms;
Chris PeBenito 853692
')
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute siggen in the siggen domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_domtrans_siggen',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type siggen_t, siggen_exec_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	domain_auto_trans($1,siggen_exec_t,siggen_t)
Chris PeBenito 853692
	allow siggen_t $1:fd use;
Chris PeBenito 853692
	allow siggen_t $1:fifo_file rw_file_perms;
Chris PeBenito 853692
	allow siggen_t $1:process sigchld;
Chris PeBenito 853692
')
Chris PeBenito 853692
Chris PeBenito 853692
########################################
Chris PeBenito 853692
## <summary>
Chris PeBenito 853692
##	Execute siggen in the siggen domain, and
Chris PeBenito 853692
##	allow the specified role the siggen domain.
Chris PeBenito 853692
## </summary>
Chris PeBenito 853692
## <param name="domain">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	Domain allowed access.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="role">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The role to be allowed the siggen domain.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
## <param name="terminal">
Chris PeBenito 853692
##	<summary>
Chris PeBenito 853692
##	The type of the terminal allow the siggen domain to use.
Chris PeBenito 853692
##	</summary>
Chris PeBenito 853692
## </param>
Chris PeBenito 853692
#
Chris PeBenito 853692
interface(`tripwire_run_siggen',`
Chris PeBenito 853692
	gen_require(`
Chris PeBenito 853692
		type siggen_t;
Chris PeBenito 853692
	')
Chris PeBenito 853692
Chris PeBenito 853692
	tripwire_domtrans_siggen($1)
Chris PeBenito 853692
	role $2 types siggen_t;
Chris PeBenito 853692
	allow siggen_t $3:chr_file rw_term_perms;
Chris PeBenito 853692
')