Blame strict/domains/program/unused/imazesrv.te
|
Chris PeBenito |
0fbfa5 |
#DESC Imazesrv - Imaze Server
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
# Author: Torsten Knodt <tk-selinux@datas-world.de>
|
|
Chris PeBenito |
0fbfa5 |
# based on games.te by Russell Coker <russell@coker.com.au>
|
|
Chris PeBenito |
0fbfa5 |
#
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
# type for shared data from imazesrv
|
|
Chris PeBenito |
0fbfa5 |
type imazesrv_data_t, file_type, sysadmfile;
|
|
Chris PeBenito |
0fbfa5 |
type imazesrv_data_labs_t, file_type, sysadmfile;
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
# domain imazesrv_t is for system operation of imazesrv
|
|
Chris PeBenito |
0fbfa5 |
# also defines imazesrv_exec_t
|
|
Chris PeBenito |
0fbfa5 |
daemon_domain(imazesrv)
|
|
Chris PeBenito |
0fbfa5 |
log_domain(imazesrv);
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
r_dir_file(imazesrv_t, imazesrv_data_t)
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
allow imazesrv_t imaze_port_t:tcp_socket name_bind;
|
|
Chris PeBenito |
0fbfa5 |
allow imazesrv_t imaze_port_t:udp_socket name_bind;
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
create_append_log_file(imazesrv_t,imazesrv_log_t)
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
can_network_server(imazesrv_t)
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
allow imazesrv_t self:capability net_bind_service;
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
r_dir_file(imazesrv_t, etc_t)
|
|
Chris PeBenito |
0fbfa5 |
|
|
Chris PeBenito |
0fbfa5 |
general_domain_access(imazesrv_t)
|