|
 |
521831c |
policy_module(isns, 1.0.0)
|
|
|
2e739f7 |
|
|
|
2e739f7 |
########################################
|
|
|
2e739f7 |
#
|
|
|
2e739f7 |
# Declarations
|
|
|
2e739f7 |
#
|
|
|
2e739f7 |
|
|
|
2e739f7 |
type isnsd_t;
|
|
|
2e739f7 |
type isnsd_exec_t;
|
|
|
2e739f7 |
init_daemon_domain(isnsd_t, isnsd_exec_t)
|
|
|
2e739f7 |
|
|
|
2e739f7 |
type isnsd_initrc_exec_t;
|
|
|
2e739f7 |
init_script_file(isnsd_initrc_exec_t)
|
|
|
2e739f7 |
|
|
|
2e739f7 |
type isnsd_var_lib_t;
|
|
|
2e739f7 |
files_type(isnsd_var_lib_t)
|
|
|
2e739f7 |
|
|
|
2e739f7 |
type isnsd_var_run_t;
|
|
|
2e739f7 |
files_pid_file(isnsd_var_run_t)
|
|
|
2e739f7 |
|
|
|
2e739f7 |
########################################
|
|
|
2e739f7 |
#
|
|
|
521831c |
# Local policy
|
|
|
2e739f7 |
#
|
|
|
2e739f7 |
|
|
|
521831c |
allow isnsd_t self:capability kill;
|
|
|
521831c |
allow isnsd_t self:process signal;
|
|
|
2e739f7 |
allow isnsd_t self:fifo_file rw_fifo_file_perms;
|
|
|
521831c |
allow isnsd_t self:udp_socket { accept listen };
|
|
|
521831c |
allow isnsd_t self:unix_stream_socket { accept listen };
|
|
|
2e739f7 |
|
|
|
2e739f7 |
manage_dirs_pattern(isnsd_t, isnsd_var_lib_t, isnsd_var_lib_t)
|
|
|
2e739f7 |
manage_files_pattern(isnsd_t, isnsd_var_lib_t, isnsd_var_lib_t)
|
|
|
521831c |
files_var_lib_filetrans(isnsd_t, isnsd_var_lib_t, dir)
|
|
|
2e739f7 |
|
|
|
2e739f7 |
manage_sock_files_pattern(isnsd_t, isnsd_var_run_t, isnsd_var_run_t)
|
|
|
2e739f7 |
manage_files_pattern(isnsd_t, isnsd_var_run_t, isnsd_var_run_t)
|
|
|
521831c |
files_pid_filetrans(isnsd_t, isnsd_var_run_t, { file sock_file })
|
|
|
2e739f7 |
|
|
|
521831c |
corenet_all_recvfrom_unlabeled(isnsd_t)
|
|
|
521831c |
corenet_all_recvfrom_netlabel(isnsd_t)
|
|
|
521831c |
corenet_tcp_sendrecv_generic_if(isnsd_t)
|
|
|
521831c |
corenet_tcp_sendrecv_generic_node(isnsd_t)
|
|
|
521831c |
corenet_tcp_sendrecv_isns_port(isnsd_t)
|
|
|
2e739f7 |
corenet_tcp_bind_generic_node(isnsd_t)
|
|
|
521831c |
corenet_sendrecv_isns_server_packets(isnsd_t)
|
|
|
2e739f7 |
corenet_tcp_bind_isns_port(isnsd_t)
|
|
|
2e739f7 |
|
|
|
2e739f7 |
logging_send_syslog_msg(isnsd_t)
|
|
|
2e739f7 |
|
|
|
521831c |
miscfiles_read_localization(isnsd_t)
|
|
|
521831c |
|
|
|
2e739f7 |
sysnet_dns_name_resolve(isnsd_t)
|