Dominick Grift 100d62a
## <summary>IRC servers.</summary>
Dominick Grift 100d62a
Dominick Grift 100d62a
########################################
Dominick Grift 100d62a
## <summary>
Dominick Grift 100d62a
##	All of the rules required to
Dominick Grift 100d62a
##	administrate an ircd environment.
Dominick Grift 100d62a
## </summary>
Dominick Grift 100d62a
## <param name="domain">
Dominick Grift 100d62a
##	<summary>
Dominick Grift 100d62a
##	Domain allowed access.
Dominick Grift 100d62a
##	</summary>
Dominick Grift 100d62a
## </param>
Dominick Grift 100d62a
## <param name="role">
Dominick Grift 100d62a
##	<summary>
Dominick Grift 100d62a
##	Role allowed access.
Dominick Grift 100d62a
##	</summary>
Dominick Grift 100d62a
## </param>
Dominick Grift 100d62a
## <rolecap/>
Dominick Grift 100d62a
#
Dominick Grift 100d62a
interface(`ircd_admin',`
Dominick Grift 100d62a
	gen_require(`
Dominick Grift 100d62a
		type ircd_t, ircd_initrc_exec_t, ircd_etc_t;
Dominick Grift 100d62a
		type ircd_log_t, ircd_var_lib_t, ircd_var_run_t;
Dominick Grift 100d62a
	')
Dominick Grift 100d62a
Dominick Grift 100d62a
	init_labeled_script_domtrans($1, ircd_initrc_exec_t)
Dominick Grift 100d62a
	domain_system_change_exemption($1)
Dominick Grift 100d62a
	role_transition $2 ircd_initrc_exec_t system_r;
Dominick Grift 100d62a
	allow $2 system_r;
Dominick Grift 100d62a
Dominick Grift 100d62a
	allow $1 ircd_t:process { ptrace signal_perms };
Dominick Grift 100d62a
	ps_process_pattern($1, ircd_t)
Dominick Grift 100d62a
Dominick Grift 100d62a
	files_search_etc($1)
Dominick Grift 100d62a
	admin_pattern($1, ircd_etc_t)
Dominick Grift 100d62a
Dominick Grift 100d62a
	logging_search_log($1)
Dominick Grift 100d62a
	admin_pattern($1, ircd_log_t)
Dominick Grift 100d62a
Dominick Grift 100d62a
	files_search_var_lib($1)
Dominick Grift 100d62a
	admin_pattern($1, ircd_var_lib_t)
Dominick Grift 100d62a
Dominick Grift 100d62a
	files_search_pids($1)
Dominick Grift 100d62a
	admin_pattern($1, ircd_var_run_t)
Dominick Grift 100d62a
')