Dominick Grift 2f444ac
## <summary>Portable Transparent Proxy Solution.</summary>
Dominick Grift 2f444ac
Dominick Grift 2f444ac
########################################
Dominick Grift 2f444ac
## <summary>
Dominick Grift 2f444ac
##	All of the rules required to
Dominick Grift 2f444ac
##	administrate an transproxy environment.
Dominick Grift 2f444ac
## </summary>
Dominick Grift 2f444ac
## <param name="domain">
Dominick Grift 2f444ac
##	<summary>
Dominick Grift 2f444ac
##	Domain allowed access.
Dominick Grift 2f444ac
##	</summary>
Dominick Grift 2f444ac
## </param>
Dominick Grift 2f444ac
## <param name="role">
Dominick Grift 2f444ac
##	<summary>
Dominick Grift 2f444ac
##	Role allowed access.
Dominick Grift 2f444ac
##	</summary>
Dominick Grift 2f444ac
## </param>
Dominick Grift 2f444ac
## <rolecap/>
Dominick Grift 2f444ac
#
Dominick Grift 2f444ac
interface(`transproxy_admin',`
Dominick Grift 2f444ac
	gen_require(`
Dominick Grift 2f444ac
		type transproxy_t, transproxy_initrc_exec_t, transproxy_var_run_t;
Dominick Grift 2f444ac
	')
Dominick Grift 2f444ac
Dominick Grift 2f444ac
	allow $1 transproxy_t:process { ptrace signal_perms };
Dominick Grift 2f444ac
	ps_process_pattern($1, transproxy_t)
Dominick Grift 2f444ac
Dominick Grift 2f444ac
	init_labeled_script_domtrans($1, transproxy_initrc_exec_t)
Dominick Grift 2f444ac
	domain_system_change_exemption($1)
Dominick Grift 2f444ac
	role_transition $2 transproxy_initrc_exec_t system_r;
Dominick Grift 2f444ac
	allow $2 system_r;
Dominick Grift 2f444ac
Dominick Grift 2f444ac
	files_search_pids($1)
Dominick Grift 2f444ac
	admin_pattern($1, transproxy_var_run_t)
Dominick Grift 2f444ac
')