diff --git a/refpolicy/policy/modules/services/remotelogin.fc b/refpolicy/policy/modules/services/remotelogin.fc new file mode 100644 index 0000000..d8691bd --- /dev/null +++ b/refpolicy/policy/modules/services/remotelogin.fc @@ -0,0 +1,2 @@ + +# Remote login currently has no file contexts. diff --git a/refpolicy/policy/modules/services/remotelogin.if b/refpolicy/policy/modules/services/remotelogin.if new file mode 100644 index 0000000..c4a3913 --- /dev/null +++ b/refpolicy/policy/modules/services/remotelogin.if @@ -0,0 +1,25 @@ +## <module name="remotelogin" layer="services"> +## <summary>Policy for rshd, rlogind, and telnetd.</summary> + +######################################## +## <interface name="remotelogin_domtrans"> +## <description> +## Domain transition to the remote login domain. +## </description> +## <parameter name="domain"> +## The type of the process performing this action. +## </parameter> +## <infoflow type="write" weight="10"/> +## </interface> +# +define(`remotelogin_domtrans',` + requires_block_template(`$0'_depend) + + authlogin_login_program_transition($1,remote_login_t) +') + +define(`remotelogin_domtrans_depend',` + type remote_login_t; +') + +## </module>