Blame refpolicy/policy/modules/system/hostname.if
|
Chris PeBenito |
15e3d8 |
# Copyright (C) 2005 Tresys Technology, LLC
|
|
Chris PeBenito |
15e3d8 |
|
|
Chris PeBenito |
15e3d8 |
#######################################
|
|
Chris PeBenito |
15e3d8 |
#
|
|
Chris PeBenito |
15e3d8 |
# hostname_transition(domain)
|
|
Chris PeBenito |
15e3d8 |
#
|
|
Chris PeBenito |
15e3d8 |
define(`hostname_transition',`
|
|
Chris PeBenito |
15e3d8 |
requires_block_template(`$0'_depend)
|
|
Chris PeBenito |
15e3d8 |
allow $1 hostname_exec_t:file { getattr read execute };
|
|
Chris PeBenito |
15e3d8 |
allow $1 hostname_t:process transition;
|
|
Chris PeBenito |
15e3d8 |
type_transition $1 hostname_exec_t:file hostname_t;
|
|
Chris PeBenito |
15e3d8 |
dontaudit $1 hostname_t:process { noatsecure siginh rlimitinh };
|
|
Chris PeBenito |
15e3d8 |
')
|
|
Chris PeBenito |
15e3d8 |
|
|
Chris PeBenito |
15e3d8 |
define(`hostname_transition_depend',`
|
|
Chris PeBenito |
15e3d8 |
type hostname_t, hostname_exec_t;
|
|
Chris PeBenito |
15e3d8 |
class file { getattr read execute };
|
|
Chris PeBenito |
15e3d8 |
class process { transition noatsecure siginh rlimitinh };
|
|
Chris PeBenito |
15e3d8 |
')
|
|
Chris PeBenito |
15e3d8 |
|
|
Chris PeBenito |
15e3d8 |
#######################################
|
|
Chris PeBenito |
15e3d8 |
#
|
|
Chris PeBenito |
15e3d8 |
# hostname_execute(domain)
|
|
Chris PeBenito |
15e3d8 |
#
|
|
Chris PeBenito |
15e3d8 |
define(`hostname_execute',`
|
|
Chris PeBenito |
15e3d8 |
requires_block_template(`$0'_depend)
|
|
Chris PeBenito |
15e3d8 |
allow $1 hostname_exec_t:file { getattr read execute execute_no_trans };
|
|
Chris PeBenito |
15e3d8 |
')
|
|
Chris PeBenito |
15e3d8 |
|
|
Chris PeBenito |
15e3d8 |
define(`hostname_execute_depend',`
|
|
Chris PeBenito |
15e3d8 |
type hostname_exec_t;
|
|
Chris PeBenito |
15e3d8 |
class file { getattr read execute execute_no_trans };
|
|
Chris PeBenito |
15e3d8 |
')
|