|
Chris PeBenito |
bd202f |
# Copyright (C) 2005 Tresys Technology, LLC
|
|
Chris PeBenito |
bd202f |
|
|
Chris PeBenito |
bd202f |
########################################
|
|
Chris PeBenito |
bd202f |
#
|
|
Chris PeBenito |
1e5c2a |
# sysnetwork_dhcpc_transition(domain)
|
|
Chris PeBenito |
1e5c2a |
#
|
|
Chris PeBenito |
1e5c2a |
define(`sysnetwork_dhcpc_transition',`
|
|
Chris PeBenito |
1e5c2a |
requires_block_template(`$0'_depend)
|
|
Chris PeBenito |
1e5c2a |
allow $1 dhcpc_exec_t:file { getattr read execute };
|
|
Chris PeBenito |
1e5c2a |
allow $1 dhcpc_t:process transition;
|
|
Chris PeBenito |
1e5c2a |
type_transition $1 dhcpc_exec_t:file dhcpc_t;
|
|
Chris PeBenito |
1e5c2a |
dontaudit $1 dhcpc_t:process { noatsecure siginh rlimitinh };
|
|
Chris PeBenito |
1e5c2a |
')
|
|
Chris PeBenito |
1e5c2a |
|
|
Chris PeBenito |
1e5c2a |
define(`sysnetwork_dhcpc_transition_depend',`
|
|
Chris PeBenito |
1e5c2a |
type dhcpc_t, dhcpc_exec_t;
|
|
Chris PeBenito |
1e5c2a |
class file { getattr read execute };
|
|
Chris PeBenito |
1e5c2a |
class process { transition noatsecure siginh rlimitinh };
|
|
Chris PeBenito |
1e5c2a |
')
|
|
Chris PeBenito |
1e5c2a |
|
|
Chris PeBenito |
1e5c2a |
########################################
|
|
Chris PeBenito |
1e5c2a |
#
|
|
Chris PeBenito |
bd202f |
# sysnetwork_ifconfig_transition(domain)
|
|
Chris PeBenito |
bd202f |
#
|
|
Chris PeBenito |
bd202f |
define(`sysnetwork_ifconfig_transition',`
|
|
Chris PeBenito |
bd202f |
requires_block_template(`$0'_depend)
|
|
Chris PeBenito |
bd202f |
allow $1 ifconfig_exec_t:file { getattr read execute };
|
|
Chris PeBenito |
bd202f |
allow $1 ifconfig_t:process transition;
|
|
Chris PeBenito |
bd202f |
type_transition $1 ifconfig_exec_t:file ifconfig_t;
|
|
Chris PeBenito |
bd202f |
dontaudit $1 ifconfig_t:process { noatsecure siginh rlimitinh };
|
|
Chris PeBenito |
bd202f |
')
|
|
Chris PeBenito |
bd202f |
|
|
Chris PeBenito |
bd202f |
define(`sysnetwork_ifconfig_transition_depend',`
|
|
Chris PeBenito |
bd202f |
type ifconfig_t, ifconfig_exec_t;
|
|
Chris PeBenito |
bd202f |
class file { getattr read execute };
|
|
Chris PeBenito |
bd202f |
class process { transition noatsecure siginh rlimitinh };
|
|
Chris PeBenito |
bd202f |
')
|
|
Chris PeBenito |
bd202f |
|
|
Chris PeBenito |
549180 |
########################################
|
|
Chris PeBenito |
549180 |
#
|
|
Chris PeBenito |
bd202f |
# sysnetwork_read_network_config(domain)
|
|
Chris PeBenito |
549180 |
#
|
|
Chris PeBenito |
549180 |
define(`sysnetwork_read_network_config',`
|
|
Chris PeBenito |
bd202f |
requires_block_template(`$0'_depend)
|
|
Chris PeBenito |
549180 |
# FIXME: allow $1 etc_t:dir search;
|
|
Chris PeBenito |
549180 |
allow $1 net_conf_t:file { getattr read };
|
|
Chris PeBenito |
549180 |
')
|
|
Chris PeBenito |
549180 |
|
|
Chris PeBenito |
549180 |
define(`sysnetwork_read_network_config_depend',`
|
|
Chris PeBenito |
549180 |
type net_conf_t;
|
|
Chris PeBenito |
549180 |
class file { getattr read };
|
|
Chris PeBenito |
549180 |
')
|