Chris PeBenito e32d52
## <summary>Policy for network configuration: ifconfig and dhcp client.</summary>
Chris PeBenito bd202f
Chris PeBenito 3865d6
#######################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito f7ebea
##	Execute dhcp client in dhcpc domain.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito f7ebea
## <param name="domain">
Chris PeBenito f7ebea
##     The type of the process performing this action.
Chris PeBenito f7ebea
## </param>
Chris PeBenito 1e5c2a
#
Chris PeBenito 199895
interface(`sysnet_domtrans_dhcpc',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type dhcpc_t, dhcpc_exec_t;
Chris PeBenito 139520
	')
Chris PeBenito 139520
Chris PeBenito 139520
	corecmd_search_sbin($1)
Chris PeBenito 0fd9dc
	domain_auto_trans($1, dhcpc_exec_t, dhcpc_t)
Chris PeBenito 0c73cd
Chris PeBenito 0c73cd
	allow $1 dhcpc_t:fd use;
Chris PeBenito 0c73cd
	allow dhcpc_t $1:fd use;
Chris PeBenito 0c73cd
	allow dhcpc_t $1:fifo_file rw_file_perms;
Chris PeBenito 0c73cd
	allow dhcpc_t $1:process sigchld;
Chris PeBenito 1e5c2a
')
Chris PeBenito 1e5c2a
Chris PeBenito ebdc3b
########################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito a1fcff
##	Execute DHCP clients in the dhcpc domain, and
Chris PeBenito a1fcff
##	allow the specified role the dhcpc domain.
Chris PeBenito a1fcff
## </summary>
Chris PeBenito a1fcff
## <param name="domain">
Chris PeBenito a1fcff
##	The type of the process performing this action.
Chris PeBenito a1fcff
## </param>
Chris PeBenito a1fcff
## <param name="role">
Chris PeBenito a1fcff
##	The role to be allowed the clock domain.
Chris PeBenito a1fcff
## </param>
Chris PeBenito a1fcff
## <param name="terminal">
Chris PeBenito a1fcff
##	The type of the terminal allow the clock domain to use.
Chris PeBenito a1fcff
## </param>
Chris PeBenito a1fcff
#
Chris PeBenito a1fcff
interface(`sysnet_run_dhcpc',`
Chris PeBenito a1fcff
	gen_require(`
Chris PeBenito a1fcff
		type dhcpc_t;
Chris PeBenito a1fcff
	')
Chris PeBenito a1fcff
Chris PeBenito a1fcff
	sysnet_domtrans_dhcpc($1)
Chris PeBenito a1fcff
	role $2 types dhcpc_t;
Chris PeBenito a1fcff
	allow dhcpc_t $3:chr_file { getattr read write ioctl };
Chris PeBenito a1fcff
')
Chris PeBenito a1fcff
Chris PeBenito a1fcff
########################################
Chris PeBenito a1fcff
## <summary>
Chris PeBenito ebdc3b
##	Send a SIGCHLD signal to the dhcp client.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The domain sending the SIGCHLD.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_sigchld_dhcpc',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcpc_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	allow $1 dhcpc_t:process sigchld;
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
########################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito ebdc3b
##	Send a kill signal to the dhcp client.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The domain sending the SIGKILL.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_kill_dhcpc',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcpc_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	allow $1 dhcpc_t:process sigkill;
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
########################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito ebdc3b
##	Send a SIGSTOP signal to the dhcp client.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The domain sending the SIGSTOP.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_sigstop_dhcpc',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcpc_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	allow $1 dhcpc_t:process sigstop;
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
########################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito ebdc3b
##	Send a null signal to the dhcp client.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The domain sending the null signal.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_signull_dhcpc',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcpc_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	allow $1 dhcpc_t:process signull;
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
########################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito ebdc3b
##	Send a generic signal to the dhcp client.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The domain sending the signal.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_signal_dhcpc',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcpc_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	allow $1 dhcpc_t:process signal;
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
########################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito 6f81e1
##	Send and receive messages from
Chris PeBenito 6f81e1
##	dhcpc over dbus.
Chris PeBenito 6f81e1
## </summary>
Chris PeBenito 6f81e1
## <param name="domain">
Chris PeBenito 6f81e1
##	Domain allowed access.
Chris PeBenito 6f81e1
## </param>
Chris PeBenito 6f81e1
#
Chris PeBenito 6f81e1
interface(`sysnet_dbus_chat_dhcpc',`
Chris PeBenito 6f81e1
	gen_require(`
Chris PeBenito 6f81e1
		type dhcpc_t;
Chris PeBenito 6f81e1
		class dbus send_msg;
Chris PeBenito 6f81e1
	')
Chris PeBenito 6f81e1
Chris PeBenito 6f81e1
	allow $1 dhcpc_t:dbus send_msg;
Chris PeBenito 6f81e1
	allow dhcpc_t $1:dbus send_msg;
Chris PeBenito 6f81e1
')
Chris PeBenito 6f81e1
Chris PeBenito 6f81e1
########################################
Chris PeBenito 6f81e1
## <summary>
Chris PeBenito ebdc3b
##	Read and write dhcp configuration files.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The domain allowed access.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_rw_dhcp_config',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcp_etc_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	files_search_etc($1)
Chris PeBenito e6a2ea
	allow $1 dhcp_etc_t:file rw_file_perms;
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
########################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito ebdc3b
##	Read dhcp client state files.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The domain allowed access.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_read_dhcpc_state',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcpc_state_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	allow $1 dhcpc_state_t:file { getattr read };
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
#######################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito ebdc3b
##	Allow network init to read network config files.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The type of the process performing this action.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_read_config',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type net_conf_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	files_search_etc($1)
Chris PeBenito ebdc3b
	allow $1 net_conf_t:file r_file_perms;
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
#######################################
Chris PeBenito ebdc3b
## <summary>
Chris PeBenito 04926d
##	Do not audit attempts to read network config files.
Chris PeBenito 04926d
## </summary>
Chris PeBenito 04926d
## <param name="domain">
Chris PeBenito 04926d
##	Domain to not audit.
Chris PeBenito 04926d
## </param>
Chris PeBenito 04926d
#
Chris PeBenito 04926d
interface(`sysnet_dontaudit_read_config',`
Chris PeBenito 04926d
	gen_require(`
Chris PeBenito 04926d
		type net_conf_t;
Chris PeBenito 04926d
	')
Chris PeBenito 04926d
Chris PeBenito 04926d
	dontaudit $1 net_conf_t:file r_file_perms;
Chris PeBenito 04926d
')
Chris PeBenito 04926d
Chris PeBenito 04926d
#######################################
Chris PeBenito 04926d
## <summary>
Chris PeBenito 57a96c
##	Create files in /etc with the type used for
Chris PeBenito 57a96c
##	the network config files.
Chris PeBenito 57a96c
## </summary>
Chris PeBenito 57a96c
## <param name="domain">
Chris PeBenito 57a96c
##	The type of the process performing this action.
Chris PeBenito 57a96c
## </param>
Chris PeBenito 57a96c
#
Chris PeBenito 9d5949
interface(`sysnet_filetrans_config',`
Chris PeBenito 57a96c
	gen_require(`
Chris PeBenito 57a96c
		type net_conf_t;
Chris PeBenito 57a96c
	')
Chris PeBenito 57a96c
Chris PeBenito 9d5949
	files_filetrans_etc($1,net_conf_t,file)
Chris PeBenito 57a96c
')
Chris PeBenito 57a96c
Chris PeBenito 57a96c
#######################################
Chris PeBenito 57a96c
## <summary>
Chris PeBenito e0d57f
##	Create, read, write, and delete network config files.
Chris PeBenito e0d57f
## </summary>
Chris PeBenito e0d57f
## <param name="domain">
Chris PeBenito e0d57f
##	The type of the process performing this action.
Chris PeBenito e0d57f
## </param>
Chris PeBenito e0d57f
#
Chris PeBenito e0d57f
interface(`sysnet_manage_config',`
Chris PeBenito e0d57f
	gen_require(`
Chris PeBenito e0d57f
		type net_conf_t;
Chris PeBenito e0d57f
	')
Chris PeBenito e0d57f
Chris PeBenito 57a96c
	allow $1 net_conf_t:file create_file_perms;
Chris PeBenito e0d57f
')
Chris PeBenito e0d57f
Chris PeBenito e0d57f
#######################################
Chris PeBenito e0d57f
## <summary>
Chris PeBenito ebdc3b
##	Read the dhcp client pid file.
Chris PeBenito ebdc3b
## </summary>
Chris PeBenito ebdc3b
## <param name="domain">
Chris PeBenito ebdc3b
##	The type of the process performing this action.
Chris PeBenito ebdc3b
## </param>
Chris PeBenito ebdc3b
#
Chris PeBenito ebdc3b
interface(`sysnet_read_dhcpc_pid',`
Chris PeBenito ebdc3b
	gen_require(`
Chris PeBenito ebdc3b
		type dhcpc_var_run_t;
Chris PeBenito ebdc3b
	')
Chris PeBenito ebdc3b
Chris PeBenito ebdc3b
	files_list_pids($1)
Chris PeBenito ebdc3b
	allow $1 dhcpc_var_run_t:file { getattr read };
Chris PeBenito ebdc3b
')
Chris PeBenito ebdc3b
Chris PeBenito daa0e0
#######################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 681c9a
##	Delete the dhcp client pid file.
Chris PeBenito 681c9a
## </summary>
Chris PeBenito 681c9a
## <param name="domain">
Chris PeBenito 681c9a
##	The type of the process performing this action.
Chris PeBenito 681c9a
## </param>
Chris PeBenito 681c9a
#
Chris PeBenito 681c9a
interface(`sysnet_delete_dhcpc_pid',`
Chris PeBenito 681c9a
	gen_require(`
Chris PeBenito 681c9a
		type dhcpc_var_run_t;
Chris PeBenito 681c9a
	')
Chris PeBenito 681c9a
Chris PeBenito 681c9a
	allow $1 dhcpc_var_run_t:file unlink;
Chris PeBenito 681c9a
')
Chris PeBenito 681c9a
Chris PeBenito 681c9a
#######################################
Chris PeBenito 681c9a
## <summary>
Chris PeBenito 414e41
##	Execute ifconfig in the ifconfig domain.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 414e41
##	The type of the process performing this action.
Chris PeBenito 414e41
## </param>
Chris PeBenito bd202f
#
Chris PeBenito 199895
interface(`sysnet_domtrans_ifconfig',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type ifconfig_t, ifconfig_exec_t;
Chris PeBenito 139520
	')
Chris PeBenito 139520
Chris PeBenito 139520
	corecmd_search_sbin($1)
Chris PeBenito 7edd02
	domain_auto_trans($1, ifconfig_exec_t, ifconfig_t)
Chris PeBenito 0c73cd
Chris PeBenito 0c73cd
	allow $1 ifconfig_t:fd use;
Chris PeBenito 0c73cd
	allow ifconfig_t $1:fd use;
Chris PeBenito 0c73cd
	allow ifconfig_t $1:fifo_file rw_file_perms;
Chris PeBenito 0c73cd
	allow ifconfig_t $1:process sigchld;
Chris PeBenito bd202f
')
Chris PeBenito bd202f
Chris PeBenito 549180
########################################
Chris PeBenito f7ebea
## <summary>
Chris PeBenito 414e41
##	Execute ifconfig in the ifconfig domain, and
Chris PeBenito 414e41
##	allow the specified role the ifconfig domain,
Chris PeBenito 414e41
##	and use the caller's terminal.
Chris PeBenito f7ebea
## </summary>
Chris PeBenito 414e41
## <param name="domain">
Chris PeBenito 414e41
##	The type of the process performing this action.
Chris PeBenito 414e41
## </param>
Chris PeBenito 414e41
## <param name="role">
Chris PeBenito 414e41
##	The role to be allowed the ifconfig domain.
Chris PeBenito 414e41
## </param>
Chris PeBenito 414e41
## <param name="terminal">
Chris PeBenito 414e41
##	The type of the terminal allow the ifconfig domain to use.
Chris PeBenito 414e41
## </param>
Chris PeBenito daa0e0
#
Chris PeBenito 199895
interface(`sysnet_run_ifconfig',`
Chris PeBenito 139520
	gen_require(`
Chris PeBenito 139520
		type ifconfig_t;
Chris PeBenito 139520
	')
Chris PeBenito 0c73cd
Chris PeBenito 139520
	corecmd_search_sbin($1)
Chris PeBenito c9428d
	sysnet_domtrans_ifconfig($1)
Chris PeBenito 0c73cd
	role $2 types ifconfig_t;
Chris PeBenito 139520
	allow ifconfig_t $3:chr_file rw_term_perms;
Chris PeBenito daa0e0
')
Chris PeBenito 7c8fc3
Chris PeBenito a1fcff
#######################################
Chris PeBenito a1fcff
## <summary>
Chris PeBenito a1fcff
##	Execute ifconfig in the caller domain.
Chris PeBenito a1fcff
## </summary>
Chris PeBenito a1fcff
## <param name="domain">
Chris PeBenito a1fcff
##	Domain allowed access.
Chris PeBenito a1fcff
## </param>
Chris PeBenito a1fcff
#
Chris PeBenito a1fcff
interface(`sysnet_exec_ifconfig',`
Chris PeBenito a1fcff
	gen_require(`
Chris PeBenito a1fcff
		type ifconfig_exec_t;
Chris PeBenito a1fcff
	')
Chris PeBenito a1fcff
Chris PeBenito a1fcff
	corecmd_search_sbin($1)
Chris PeBenito a1fcff
	can_exec($1,ifconfig_exec_t)
Chris PeBenito a1fcff
')
Chris PeBenito a1fcff
Chris PeBenito 7c8fc3
########################################
Chris PeBenito 7c8fc3
## <summary>
Chris PeBenito 7c8fc3
##	Read the DHCP configuration files.
Chris PeBenito 7c8fc3
## </summary>
Chris PeBenito 7c8fc3
## <param name="domain">
Chris PeBenito 7c8fc3
##	Domain allowed access.
Chris PeBenito 7c8fc3
## </param>
Chris PeBenito 7c8fc3
#
Chris PeBenito 7c8fc3
interface(`sysnet_read_dhcp_config',`
Chris PeBenito 7c8fc3
	gen_require(`
Chris PeBenito 7c8fc3
		type dhcp_etc_t;
Chris PeBenito 7c8fc3
	')
Chris PeBenito 7c8fc3
Chris PeBenito 7c8fc3
	files_search_etc($1)
Chris PeBenito 7c8fc3
	allow $1 dhcp_etc_t:dir search;
Chris PeBenito 7c8fc3
	allow $1 dhcp_etc_t:file { getattr read };
Chris PeBenito 7c8fc3
')
Chris PeBenito 7c8fc3
Chris PeBenito 7c8fc3
########################################
Chris PeBenito 7c8fc3
## <summary>
Chris PeBenito 7c8fc3
##	Search the DHCP state data directory.
Chris PeBenito 7c8fc3
## </summary>
Chris PeBenito 7c8fc3
## <param name="domain">
Chris PeBenito 7c8fc3
##	Domain allowed access.
Chris PeBenito 7c8fc3
## </param>
Chris PeBenito 7c8fc3
#
Chris PeBenito 7c8fc3
interface(`sysnet_search_dhcp_state',`
Chris PeBenito 7c8fc3
	gen_require(`
Chris PeBenito 7c8fc3
		type dhcp_state_t;
Chris PeBenito 7c8fc3
	')
Chris PeBenito 7c8fc3
Chris PeBenito 7c8fc3
	files_search_var_lib($1)
Chris PeBenito 7c8fc3
	allow $1 dhcp_state_t:dir search;
Chris PeBenito 7c8fc3
')
Chris PeBenito 7c8fc3
Chris PeBenito 7c8fc3
########################################
Chris PeBenito 7c8fc3
## <summary>
Chris PeBenito 7c8fc3
##	Create DHCP state data.
Chris PeBenito 7c8fc3
## </summary>
Chris PeBenito 7c8fc3
## <desc>
Chris PeBenito 7c8fc3
##	

Chris PeBenito 7c8fc3
##	Create DHCP state data.
Chris PeBenito 7c8fc3
##	

Chris PeBenito 7c8fc3
##	

Chris PeBenito 7c8fc3
##	This is added for DHCP server, as
Chris PeBenito 7c8fc3
##	the server and client put their state
Chris PeBenito 7c8fc3
##	files in the same directory.
Chris PeBenito 7c8fc3
##	

Chris PeBenito 7c8fc3
## </desc>
Chris PeBenito 7c8fc3
## <param name="domain">
Chris PeBenito 7c8fc3
##	Domain allowed access.
Chris PeBenito 7c8fc3
## </param>
Chris PeBenito 7c8fc3
## <param name="file_type">
Chris PeBenito 7c8fc3
##	The type of the object to be created
Chris PeBenito 7c8fc3
## </param>
Chris PeBenito 7c8fc3
## <param name="object_class" optional="true">
Chris PeBenito 7c8fc3
##	The object class.  If not specified, file is used.
Chris PeBenito 7c8fc3
## </param>
Chris PeBenito 7c8fc3
#
Chris PeBenito 9d5949
interface(`sysnet_filetrans_dhcp_state',`
Chris PeBenito 7c8fc3
	gen_require(`
Chris PeBenito 7c8fc3
		type dhcp_state_t;
Chris PeBenito 7c8fc3
	')
Chris PeBenito 7c8fc3
Chris PeBenito 7c8fc3
	files_search_var_lib($1)
Chris PeBenito 7c8fc3
	allow $1 dhcp_state_t:dir rw_dir_perms;
Chris PeBenito 9d5949
Chris PeBenito 7c8fc3
	ifelse(`$3',`',`
Chris PeBenito 7c8fc3
		type_transition $1 dhcp_state_t:file $2;
Chris PeBenito 7c8fc3
	',`
Chris PeBenito 7c8fc3
		type_transition $1 dhcp_state_t:$3 $2;
Chris PeBenito 7c8fc3
	')
Chris PeBenito 7c8fc3
')
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
########################################
Chris PeBenito 98a8ea
## <summary>
Chris PeBenito 98a8ea
##	Perform a DNS name resolution.
Chris PeBenito 98a8ea
## </summary>
Chris PeBenito 98a8ea
## <param name="domain">
Chris PeBenito 98a8ea
##	Domain allowed access.
Chris PeBenito 98a8ea
## </param>
Chris PeBenito 98a8ea
#
Chris PeBenito 98a8ea
interface(`sysnet_dns_name_resolve',`
Chris PeBenito 98a8ea
	gen_require(`
Chris PeBenito 98a8ea
		type net_conf_t;
Chris PeBenito 98a8ea
	')
Chris PeBenito 98a8ea
Chris PeBenito 77f6e2
	allow $1 self:tcp_socket create_socket_perms;
Chris PeBenito 98a8ea
	allow $1 self:udp_socket create_socket_perms;
Chris PeBenito 77f6e2
	corenet_tcp_sendrecv_all_if($1)
Chris PeBenito 98a8ea
	corenet_udp_sendrecv_all_if($1)
Chris PeBenito 98a8ea
	corenet_raw_sendrecv_all_if($1)
Chris PeBenito 77f6e2
	corenet_tcp_sendrecv_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_udp_sendrecv_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_raw_sendrecv_all_nodes($1)
Chris PeBenito 574e63
	corenet_tcp_sendrecv_dns_port($1)
Chris PeBenito 98a8ea
	corenet_udp_sendrecv_dns_port($1)
Chris PeBenito bd7037
	corenet_non_ipsec_sendrecv($1)
Chris PeBenito 77f6e2
	corenet_tcp_bind_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_udp_bind_all_nodes($1)
Chris PeBenito 77f6e2
	corenet_tcp_connect_dns_port($1)
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
	files_search_etc($1)
Chris PeBenito 98a8ea
	allow $1 net_conf_t:file r_file_perms;
Chris PeBenito 98a8ea
')
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
########################################
Chris PeBenito 98a8ea
## <summary>
Chris PeBenito 98a8ea
##	Connect and use a LDAP server.
Chris PeBenito 98a8ea
## </summary>
Chris PeBenito 98a8ea
## <param name="domain">
Chris PeBenito 98a8ea
##	Domain allowed access.
Chris PeBenito 98a8ea
## </param>
Chris PeBenito 98a8ea
#
Chris PeBenito 98a8ea
interface(`sysnet_use_ldap',`
Chris PeBenito 98a8ea
	gen_require(`
Chris PeBenito 98a8ea
		type net_conf_t;
Chris PeBenito 98a8ea
	')		
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
	allow $1 self:tcp_socket create_socket_perms;
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
	corenet_tcp_sendrecv_all_if($1)
Chris PeBenito 98a8ea
	corenet_raw_sendrecv_all_if($1)
Chris PeBenito 98a8ea
	corenet_tcp_sendrecv_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_raw_sendrecv_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_tcp_sendrecv_ldap_port($1)
Chris PeBenito bd7037
	corenet_non_ipsec_sendrecv($1)
Chris PeBenito 98a8ea
	corenet_tcp_bind_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_tcp_connect_ldap_port($1)
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
	files_search_etc($1)
Chris PeBenito 98a8ea
	allow $1 net_conf_t:file r_file_perms;
Chris PeBenito 98a8ea
')
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
########################################
Chris PeBenito 98a8ea
## <summary>
Chris PeBenito 98a8ea
##	Connect and use remote port mappers.
Chris PeBenito 98a8ea
## </summary>
Chris PeBenito 98a8ea
## <param name="domain">
Chris PeBenito 98a8ea
##	Domain allowed access.
Chris PeBenito 98a8ea
## </param>
Chris PeBenito 98a8ea
#
Chris PeBenito 98a8ea
interface(`sysnet_use_portmap',`
Chris PeBenito 98a8ea
	gen_require(`
Chris PeBenito 98a8ea
		type net_conf_t;
Chris PeBenito 98a8ea
	')		
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
	allow $1 self:tcp_socket create_socket_perms;
Chris PeBenito 98a8ea
	allow $1 self:udp_socket create_socket_perms;
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
	corenet_tcp_sendrecv_all_if($1)
Chris PeBenito 98a8ea
	corenet_udp_sendrecv_all_if($1)
Chris PeBenito 98a8ea
	corenet_raw_sendrecv_all_if($1)
Chris PeBenito 98a8ea
	corenet_tcp_sendrecv_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_udp_sendrecv_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_raw_sendrecv_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_tcp_sendrecv_portmap_port($1)
Chris PeBenito 98a8ea
	corenet_udp_sendrecv_portmap_port($1)
Chris PeBenito bd7037
	corenet_non_ipsec_sendrecv($1)
Chris PeBenito 98a8ea
	corenet_tcp_bind_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_udp_bind_all_nodes($1)
Chris PeBenito 98a8ea
	corenet_tcp_connect_portmap_port($1)
Chris PeBenito 98a8ea
Chris PeBenito 98a8ea
	files_search_etc($1)
Chris PeBenito 98a8ea
	allow $1 net_conf_t:file r_file_perms;
Chris PeBenito 98a8ea
')