|
Dominick Grift |
28c3a5f |
policy_module(pingd, 1.0.1)
|
|
 |
1ec3d1a |
|
|
|
1ec3d1a |
########################################
|
|
|
1ec3d1a |
#
|
|
|
1ec3d1a |
# Declarations
|
|
|
1ec3d1a |
#
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
type pingd_t;
|
|
|
1ec3d1a |
type pingd_exec_t;
|
|
|
1ec3d1a |
init_daemon_domain(pingd_t, pingd_exec_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
type pingd_etc_t;
|
|
|
1ec3d1a |
files_config_file(pingd_etc_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
type pingd_initrc_exec_t;
|
|
|
1ec3d1a |
init_script_file(pingd_initrc_exec_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
type pingd_modules_t;
|
|
|
1ec3d1a |
files_type(pingd_modules_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
########################################
|
|
|
1ec3d1a |
#
|
|
Dominick Grift |
28c3a5f |
# Local policy
|
|
|
1ec3d1a |
#
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
allow pingd_t self:capability net_raw;
|
|
Dominick Grift |
28c3a5f |
allow pingd_t self:tcp_socket { accept listen };
|
|
|
1ec3d1a |
allow pingd_t self:rawip_socket create_socket_perms;
|
|
|
1ec3d1a |
|
|
Dominick Grift |
28c3a5f |
allow pingd_t pingd_etc_t:file read_file_perms;
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
read_files_pattern(pingd_t, pingd_modules_t, pingd_modules_t)
|
|
|
1ec3d1a |
mmap_files_pattern(pingd_t, pingd_modules_t, pingd_modules_t)
|
|
|
1ec3d1a |
|
|
Dominick Grift |
28c3a5f |
corenet_all_recvfrom_unlabeled(pingd_t)
|
|
Dominick Grift |
28c3a5f |
corenet_all_recvfrom_netlabel(pingd_t)
|
|
Dominick Grift |
28c3a5f |
corenet_tcp_sendrecv_generic_if(pingd_t)
|
|
Dominick Grift |
28c3a5f |
corenet_raw_sendrecv_generic_if(pingd_t)
|
|
Dominick Grift |
28c3a5f |
corenet_tcp_sendrecv_generic_node(pingd_t)
|
|
Dominick Grift |
28c3a5f |
corenet_raw_sendrecv_generic_node(pingd_t)
|
|
Dominick Grift |
28c3a5f |
corenet_tcp_sendrecv_all_ports(pingd_t)
|
|
|
1ec3d1a |
corenet_raw_bind_generic_node(pingd_t)
|
|
|
1ec3d1a |
corenet_tcp_bind_generic_node(pingd_t)
|
|
Dominick Grift |
28c3a5f |
|
|
Dominick Grift |
28c3a5f |
corenet_sendrecv_pingd_server_packets(pingd_t)
|
|
|
1ec3d1a |
corenet_tcp_bind_pingd_port(pingd_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
auth_use_nsswitch(pingd_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
files_search_usr(pingd_t)
|
|
|
1ec3d1a |
|
|
|
1ec3d1a |
logging_send_syslog_msg(pingd_t)
|