Chris PeBenito 2961e7
## <summary>OpenLDAP directory server</summary>
Chris PeBenito 2961e7
Chris PeBenito 2961e7
########################################
Chris PeBenito 2961e7
## <summary>
Chris PeBenito 2961e7
##	Read the contents of the OpenLDAP
Chris PeBenito 2961e7
##	database directories.
Chris PeBenito 2961e7
## </summary>
Chris PeBenito 2961e7
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 2961e7
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 2961e7
## </param>
Chris PeBenito 2961e7
#
Chris PeBenito 1815ba
interface(`ldap_list_db',`
Chris PeBenito 2961e7
	gen_require(`
Chris PeBenito 2961e7
		type slapd_db_t;
Chris PeBenito 2961e7
	')
Chris PeBenito 2961e7
Chris PeBenito 2961e7
	allow $1 slapd_db_t:dir r_dir_perms;
Chris PeBenito 2961e7
')
Chris PeBenito 2961e7
Chris PeBenito 2961e7
########################################
Chris PeBenito 2961e7
## <summary>
Chris PeBenito 2961e7
##	Read the OpenLDAP configuration files.
Chris PeBenito 2961e7
## </summary>
Chris PeBenito 2961e7
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 2961e7
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 2961e7
## </param>
Chris PeBenito 2961e7
#
Chris PeBenito 2961e7
interface(`ldap_read_config',`
Chris PeBenito 2961e7
	gen_require(`
Chris PeBenito 2961e7
		type slapd_etc_t;
Chris PeBenito 2961e7
	')
Chris PeBenito 2961e7
Chris PeBenito 2961e7
	files_search_etc($1)
Chris PeBenito 2961e7
	allow $1 slapd_etc_t:file { getattr read };
Chris PeBenito 2961e7
')
Chris PeBenito 3774e4
Chris PeBenito 3774e4
########################################
Chris PeBenito 3774e4
## <summary>
Chris PeBenito 3774e4
##	Use LDAP over TCP connection.
Chris PeBenito 3774e4
## </summary>
Chris PeBenito 3774e4
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 3774e4
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 3774e4
## </param>
Chris PeBenito 3774e4
#
Chris PeBenito 3774e4
interface(`ldap_use',`
Chris PeBenito 3774e4
	gen_require(`
Chris PeBenito 3774e4
		type slapd_t;
Chris PeBenito 3774e4
	')
Chris PeBenito 3774e4
Chris PeBenito 3774e4
	allow $1 slapd_t:tcp_socket { connectto recvfrom };
Chris PeBenito 3774e4
	allow slapd_t $1:tcp_socket { acceptfrom recvfrom };
Chris PeBenito 3774e4
	kernel_tcp_recvfrom($1)
Chris PeBenito 3774e4
')