Chris PeBenito 44d5d9
## <summary>ucspitcp policy</summary>
Chris PeBenito 44d5d9
## <desc>
Chris PeBenito 44d5d9
##      

Chris PeBenito 44d5d9
##              Policy for DJB's ucspi-tcpd
Chris PeBenito 44d5d9
##      

Chris PeBenito 44d5d9
## </desc>
Chris PeBenito 44d5d9
Chris PeBenito 44d5d9
########################################
Chris PeBenito 44d5d9
## <summary>
Chris PeBenito 44d5d9
##      Define a specified domain as a ucspitcp service.
Chris PeBenito 44d5d9
## </summary>
Chris PeBenito 44d5d9
## <param name="domain">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 44d5d9
##      Domain allowed access.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 44d5d9
## </param>
Chris PeBenito 44d5d9
## <param name="entrypoint">
Chris PeBenito 885b83
##	<summary>
Chris PeBenito 44d5d9
##      The type associated with the process program.
Chris PeBenito 885b83
##	</summary>
Chris PeBenito 44d5d9
## </param>
Chris PeBenito 44d5d9
#
Chris PeBenito 44d5d9
interface(`ucspitcp_service_domain', `
Chris PeBenito 44d5d9
	gen_require(`
Chris PeBenito 44d5d9
		type ucspitcp_t;
Chris PeBenito 44d5d9
		role system_r;
Chris PeBenito 44d5d9
	')
Chris PeBenito 44d5d9
Chris PeBenito 44d5d9
	domain_type($1)
Chris PeBenito 44d5d9
	domain_entry_file($1,$2)
Chris PeBenito 44d5d9
Chris PeBenito 44d5d9
	role system_r types $1;
Chris PeBenito 44d5d9
Chris PeBenito 44d5d9
	domain_auto_trans(ucspitcp_t, $2, $1)
Chris PeBenito 44d5d9
Chris PeBenito 44d5d9
	allow $1 ucspitcp_t:fd use;
Chris PeBenito 44d5d9
	allow $1 ucspitcp_t:process sigchld;
Chris PeBenito 44d5d9
	allow $1 ucspitcp_t:tcp_socket rw_stream_socket_perms;
Chris PeBenito 44d5d9
')
Chris PeBenito 44d5d9