Chris PeBenito 4aa0dc
Chris PeBenito 5ea24b
policy_module(tcpd,1.0.0)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
########################################
Chris PeBenito 4aa0dc
#
Chris PeBenito 4aa0dc
# Declarations
Chris PeBenito 4aa0dc
#
Chris PeBenito 4aa0dc
type tcpd_t;
Chris PeBenito 4aa0dc
type tcpd_exec_t;
Chris PeBenito 4aa0dc
inetd_tcp_service_domain(tcpd_t,tcpd_exec_t)
Chris PeBenito 4aa0dc
role system_r types tcpd_t;
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
type tcpd_tmp_t;
Chris PeBenito 4aa0dc
files_tmp_file(tcpd_tmp_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
########################################
Chris PeBenito 4aa0dc
#
Chris PeBenito 4aa0dc
# Local policy
Chris PeBenito 4aa0dc
#
Chris PeBenito 4aa0dc
allow tcpd_t self:tcp_socket create_stream_socket_perms;
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
allow tcpd_t tcpd_tmp_t:dir create_dir_perms;
Chris PeBenito 4aa0dc
allow tcpd_t tcpd_tmp_t:file create_file_perms;
Chris PeBenito 103fe2
files_tmp_filetrans(tcpd_t, tcpd_tmp_t, { file dir })
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
corenet_raw_sendrecv_all_if(tcpd_t)
Chris PeBenito 4aa0dc
corenet_tcp_sendrecv_all_if(tcpd_t)
Chris PeBenito 4aa0dc
corenet_raw_sendrecv_all_nodes(tcpd_t)
Chris PeBenito 4aa0dc
corenet_tcp_sendrecv_all_nodes(tcpd_t)
Chris PeBenito 4aa0dc
corenet_tcp_sendrecv_all_ports(tcpd_t)
Chris PeBenito bd7037
corenet_non_ipsec_sendrecv(tcpd_t)
Chris PeBenito 4aa0dc
corenet_tcp_bind_all_nodes(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
fs_getattr_xattr_fs(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
# Run other daemons in the inetd child domain.
Chris PeBenito 4aa0dc
corecmd_search_bin(tcpd_t)
Chris PeBenito 4aa0dc
corecmd_search_sbin(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
files_read_etc_files(tcpd_t)
Chris PeBenito 4aa0dc
# no good reason for files_dontaudit_search_var, probably nscd
Chris PeBenito 4aa0dc
files_dontaudit_search_var(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
libs_use_ld_so(tcpd_t)
Chris PeBenito 4aa0dc
libs_use_shared_libs(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
logging_send_syslog_msg(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
miscfiles_read_localization(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
sysnet_read_config(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito 4aa0dc
inetd_domtrans_child(tcpd_t)
Chris PeBenito 4aa0dc
Chris PeBenito bb7170
optional_policy(`
Chris PeBenito d4dca5
	finger_domtrans(tcpd_t)
Chris PeBenito d4dca5
')
Chris PeBenito d4dca5
Chris PeBenito bb7170
optional_policy(`
Chris PeBenito 4aa0dc
	nis_use_ypbind(tcpd_t)
Chris PeBenito 4aa0dc
')
Chris PeBenito 545b0c
Chris PeBenito bb7170
optional_policy(`
Chris PeBenito 1815ba
	portmap_udp_send(tcpd_t)
Chris PeBenito eb3cb6
')
Chris PeBenito eb3cb6
Chris PeBenito bb7170
optional_policy(`
Chris PeBenito 4fd520
	rlogin_domtrans(tcpd_t)
Chris PeBenito 4fd520
')
Chris PeBenito 4fd520
Chris PeBenito bb7170
optional_policy(`
Chris PeBenito eb3cb6
	rshd_domtrans(tcpd_t)
Chris PeBenito 545b0c
')