#DESC ucspi-tcp - TCP Server and Client Tools # # Author Petre Rodan <kaiowas@gentoo.org> # Andy Dustman (rblsmtp-related policy) # # http://cr.yp.to/ucspi-tcp.html daemon_base_domain(utcpserver) can_network(utcpserver_t) allow utcpserver_t etc_t:file r_file_perms; allow utcpserver_t { bin_t sbin_t var_t }:dir search; allow utcpserver_t self:capability { net_bind_service setgid setuid }; allow utcpserver_t self:fifo_file { read write }; allow utcpserver_t self:process { fork sigchld }; allow utcpserver_t port_t:udp_socket name_bind; ifdef(`qmail.te', ` domain_auto_trans(utcpserver_t, qmail_smtpd_exec_t, qmail_smtpd_t) allow utcpserver_t smtp_port_t:tcp_socket name_bind; allow qmail_smtpd_t utcpserver_t:tcp_socket { read write getattr }; allow utcpserver_t qmail_etc_t:dir r_dir_perms; allow utcpserver_t qmail_etc_t:file r_file_perms; ') daemon_base_domain(rblsmtpd) can_network(rblsmtpd_t) allow rblsmtpd_t self:process { fork sigchld }; allow rblsmtpd_t etc_t:file r_file_perms; allow rblsmtpd_t { bin_t var_t }:dir search; allow rblsmtpd_t port_t:udp_socket name_bind; allow rblsmtpd_t utcpserver_t:tcp_socket { read write getattr }; ifdef(`qmail.te', ` domain_auto_trans(rblsmtpd_t, qmail_smtpd_exec_t, qmail_smtpd_t) allow qmail_queue_t rblsmtpd_t:fd use; ') ifdef(`daemontools.te', ` svc_ipc_domain(rblsmtpd_t) ') domain_auto_trans(utcpserver_t, rblsmtpd_exec_t, rblsmtpd_t)