Blame strict/domains/program/slrnpull.te
|
Chris PeBenito |
0fbfa5 |
#DESC slrnpull
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# Author: Dan Walsh <dwalsh@redhat.com>
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
#################################
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# Rules for the slrnpull_t domain.
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# slrnpull_exec_t is the type of the slrnpull executable.
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
daemon_domain(slrnpull)
|
|
Chris PeBenito |
0fbfa5 |
type slrnpull_spool_t, file_type, sysadmfile;
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
log_domain(slrnpull)
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
ifdef(`logrotate.te', `
|
|
Chris PeBenito |
0fbfa5 |
create_dir_file(logrotate_t, slrnpull_spool_t)
|
|
Chris PeBenito |
0fbfa5 |
')
|
|
Chris PeBenito |
0fbfa5 |
system_crond_entry(slrnpull_exec_t, slrnpull_t)
|
|
Chris PeBenito |
0fbfa5 |
allow userdomain slrnpull_spool_t:dir search;
|
|
Chris PeBenito |
0fbfa5 |
rw_dir_create_file(slrnpull_t, slrnpull_spool_t)
|
|
Chris PeBenito |
0fbfa5 |
allow slrnpull_t var_spool_t:dir search;
|
|
Chris PeBenito |
0fbfa5 |
allow slrnpull_t slrnpull_spool_t:dir create_dir_perms;
|