Blame refpolicy/policy/modules/services/networkmanager.if
|
Chris PeBenito |
239db5 |
## <summary>Manager for dynamically switching between networks.</summary>
|
|
Chris PeBenito |
d828b5 |
|
|
Chris PeBenito |
d828b5 |
########################################
|
|
Chris PeBenito |
d828b5 |
## <summary>
|
|
Chris PeBenito |
6f81e1 |
## Read and write NetworkManager UDP sockets.
|
|
Chris PeBenito |
6f81e1 |
## </summary>
|
|
Chris PeBenito |
6f81e1 |
## <param name="domain">
|
|
Chris PeBenito |
6f81e1 |
## Domain allowed access.
|
|
Chris PeBenito |
6f81e1 |
## </param>
|
|
Chris PeBenito |
6f81e1 |
#
|
|
Chris PeBenito |
6f81e1 |
# cjp: added for named.
|
|
Chris PeBenito |
6f81e1 |
interface(`networkmanager_rw_udp_socket',`
|
|
Chris PeBenito |
6f81e1 |
gen_require(`
|
|
Chris PeBenito |
6f81e1 |
type NetworkManager_t;
|
|
Chris PeBenito |
6f81e1 |
')
|
|
Chris PeBenito |
6f81e1 |
|
|
Chris PeBenito |
6f81e1 |
allow $1 NetworkManager_t:udp_socket { read write };
|
|
Chris PeBenito |
6f81e1 |
')
|
|
Chris PeBenito |
6f81e1 |
|
|
Chris PeBenito |
6f81e1 |
########################################
|
|
Chris PeBenito |
6f81e1 |
## <summary>
|
|
Chris PeBenito |
6f81e1 |
## Read and write NetworkManager packet sockets.
|
|
Chris PeBenito |
6f81e1 |
## </summary>
|
|
Chris PeBenito |
6f81e1 |
## <param name="domain">
|
|
Chris PeBenito |
6f81e1 |
## Domain allowed access.
|
|
Chris PeBenito |
6f81e1 |
## </param>
|
|
Chris PeBenito |
6f81e1 |
#
|
|
Chris PeBenito |
6f81e1 |
# cjp: added for named.
|
|
Chris PeBenito |
6f81e1 |
interface(`networkmanager_rw_packet_socket',`
|
|
Chris PeBenito |
6f81e1 |
gen_require(`
|
|
Chris PeBenito |
6f81e1 |
type NetworkManager_t;
|
|
Chris PeBenito |
6f81e1 |
')
|
|
Chris PeBenito |
6f81e1 |
|
|
Chris PeBenito |
6f81e1 |
allow $1 NetworkManager_t:packet_socket { read write };
|
|
Chris PeBenito |
6f81e1 |
')
|
|
Chris PeBenito |
6f81e1 |
|
|
Chris PeBenito |
6f81e1 |
########################################
|
|
Chris PeBenito |
6f81e1 |
## <summary>
|
|
Chris PeBenito |
6f81e1 |
## Read and write NetworkManager netlink
|
|
Chris PeBenito |
6f81e1 |
## routing sockets.
|
|
Chris PeBenito |
6f81e1 |
## </summary>
|
|
Chris PeBenito |
6f81e1 |
## <param name="domain">
|
|
Chris PeBenito |
6f81e1 |
## Domain allowed access.
|
|
Chris PeBenito |
6f81e1 |
## </param>
|
|
Chris PeBenito |
6f81e1 |
#
|
|
Chris PeBenito |
6f81e1 |
# cjp: added for named.
|
|
Chris PeBenito |
6f81e1 |
interface(`networkmanager_rw_routing_socket',`
|
|
Chris PeBenito |
6f81e1 |
gen_require(`
|
|
Chris PeBenito |
6f81e1 |
type NetworkManager_t;
|
|
Chris PeBenito |
6f81e1 |
')
|
|
Chris PeBenito |
6f81e1 |
|
|
Chris PeBenito |
6f81e1 |
allow $1 NetworkManager_t:netlink_route_socket { read write };
|
|
Chris PeBenito |
6f81e1 |
')
|
|
Chris PeBenito |
6f81e1 |
|
|
Chris PeBenito |
6f81e1 |
########################################
|
|
Chris PeBenito |
6f81e1 |
## <summary>
|
|
Chris PeBenito |
d828b5 |
## Send and receive messages from
|
|
Chris PeBenito |
d828b5 |
## NetworkManager over dbus.
|
|
Chris PeBenito |
d828b5 |
## </summary>
|
|
Chris PeBenito |
d828b5 |
## <param name="domain">
|
|
Chris PeBenito |
d828b5 |
## Domain allowed access.
|
|
Chris PeBenito |
d828b5 |
## </param>
|
|
Chris PeBenito |
d828b5 |
#
|
|
Chris PeBenito |
d828b5 |
interface(`networkmanager_dbus_chat',`
|
|
Chris PeBenito |
d828b5 |
gen_require(`
|
|
Chris PeBenito |
d828b5 |
type NetworkManager_t;
|
|
Chris PeBenito |
d828b5 |
class dbus send_msg;
|
|
Chris PeBenito |
d828b5 |
')
|
|
Chris PeBenito |
d828b5 |
|
|
Chris PeBenito |
d828b5 |
allow $1 NetworkManager_t:dbus send_msg;
|
|
Chris PeBenito |
d828b5 |
allow NetworkManager_t $1:dbus send_msg;
|
|
Chris PeBenito |
d828b5 |
')
|