Chris PeBenito e08118
## <summary>Point to Point Protocol daemon creates links in ppp networks</summary>
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito e08118
##	Use PPP file discriptors.
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito e08118
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito 1c1ac6
interface(`ppp_use_fds',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type pppd_t;
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito e08118
	allow $1 pppd_t:fd use;
Chris PeBenito e08118
')
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito 725926
##	Do not audit attempts to inherit
Chris PeBenito 725926
##	and use PPP file discriptors.
Chris PeBenito 725926
## </summary>
Chris PeBenito 725926
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 725926
##	Domain to not audit.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 725926
## </param>
Chris PeBenito 725926
#
Chris PeBenito 1c1ac6
interface(`ppp_dontaudit_use_fds',`
Chris PeBenito 725926
	gen_require(`
Chris PeBenito 725926
		type pppd_t;
Chris PeBenito 725926
	')
Chris PeBenito 725926
Chris PeBenito 725926
	dontaudit $1 pppd_t:fd use;
Chris PeBenito 725926
')
Chris PeBenito 725926
Chris PeBenito 725926
########################################
Chris PeBenito 725926
## <summary>
Chris PeBenito 1470ff
##	Send a SIGCHLD signal to PPP.
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito e08118
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito e08118
interface(`ppp_sigchld',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type pppd_t;
Chris PeBenito e08118
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito e08118
	allow $1 pppd_t:process sigchld;
Chris PeBenito e08118
')
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito 725926
##	Send a generic signal to PPP.
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito e08118
##	Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito e08118
interface(`ppp_signal',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type pppd_t;
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito e08118
	allow $1 pppd_t:process signal;
Chris PeBenito e08118
')
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito e08118
##	 Execute domain in the ppp domain.
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito e08118
##	 Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito e08118
interface(`ppp_domtrans',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type pppd_t, pppd_exec_t;
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito e08118
	corecmd_search_sbin($1)
Chris PeBenito e08118
	domain_auto_trans($1, pppd_exec_t, pppd_t)
Chris PeBenito e08118
Chris PeBenito e08118
	allow $1 pppd_t:fd use;
Chris PeBenito e08118
	allow pppd_t $1:fd use;
Chris PeBenito e08118
	allow pppd_t $1:fifo_file rw_file_perms;
Chris PeBenito e08118
	allow pppd_t $1:process sigchld;
Chris PeBenito e08118
')
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito e08118
##	 Conditionally execute ppp daemon on behalf of a user or staff type.
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito e08118
##	 Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito e08118
interface(`ppp_run_cond',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type pppd_t;
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito e08118
	role $2 types pppd_t;
Chris PeBenito e08118
Chris PeBenito e08118
	tunable_policy(`pppd_for_user',`
Chris PeBenito e08118
		ppp_domtrans($1)
Chris PeBenito e08118
		allow pppd_t $3:chr_file rw_term_perms;
Chris PeBenito e08118
	')
Chris PeBenito e08118
')
Chris PeBenito e08118
Chris PeBenito e08118
########################################
Chris PeBenito e08118
## <summary>
Chris PeBenito e08118
##	 Unconditionally execute ppp daemon on behalf of a user or staff type.
Chris PeBenito e08118
## </summary>
Chris PeBenito e08118
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito e08118
##	 Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito e08118
## </param>
Chris PeBenito e08118
#
Chris PeBenito e08118
interface(`ppp_run',`
Chris PeBenito e08118
	gen_require(`
Chris PeBenito e08118
		type pppd_t;
Chris PeBenito e08118
	')
Chris PeBenito e08118
Chris PeBenito e08118
	ppp_domtrans($1)
Chris PeBenito e08118
	role $2 types pppd_t;
Chris PeBenito e08118
	allow pppd_t $3:chr_file rw_term_perms;
Chris PeBenito e08118
')