Blame policy/modules/services/zosremote.te
|
Chris PeBenito |
3c9b2e9 |
policy_module(zosremote,1.0.0)
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
########################################
|
|
Chris PeBenito |
3c9b2e9 |
#
|
|
Chris PeBenito |
3c9b2e9 |
# Declarations
|
|
Chris PeBenito |
3c9b2e9 |
#
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
type zos_remote_t;
|
|
Chris PeBenito |
3c9b2e9 |
type zos_remote_exec_t;
|
|
Chris PeBenito |
3c9b2e9 |
init_system_domain(zos_remote_t, zos_remote_exec_t)
|
|
Chris PeBenito |
3c9b2e9 |
logging_dispatcher_domain(zos_remote_t, zos_remote_exec_t)
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
########################################
|
|
Chris PeBenito |
3c9b2e9 |
#
|
|
Chris PeBenito |
3c9b2e9 |
# zos_remote local policy
|
|
Chris PeBenito |
3c9b2e9 |
#
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
allow zos_remote_t self:process signal;
|
|
Chris PeBenito |
3c9b2e9 |
allow zos_remote_t self:fifo_file rw_file_perms;
|
|
Chris PeBenito |
3c9b2e9 |
allow zos_remote_t self:unix_stream_socket create_stream_socket_perms;
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
files_read_etc_files(zos_remote_t)
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
auth_use_nsswitch(zos_remote_t);
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
miscfiles_read_localization(zos_remote_t)
|
|
Chris PeBenito |
3c9b2e9 |
|
|
Chris PeBenito |
3c9b2e9 |
logging_send_syslog_msg(zos_remote_t)
|