selinux-policy/strict/domains/program/unused/jabberd.te

33 lines
907 B
Plaintext
Raw Normal View History

2005-04-29 17:45:15 +00:00
#DESC jabberd - Jabber daemon
#
# Author: Colin Walters <walters@verbum.org>
# X-Debian-Packages: jabber
daemon_domain(jabberd)
logdir_domain(jabberd)
var_lib_domain(jabberd)
type jabber_client_port_t, port_type;
type jabber_interserver_port_t, port_type;
allow jabberd_t jabber_client_port_t:tcp_socket name_bind;
allow jabberd_t jabber_interserver_port_t:tcp_socket name_bind;
allow jabberd_t etc_t:lnk_file read;
allow jabberd_t { etc_t etc_runtime_t }:file { read getattr };
# For SSL
allow jabberd_t random_device_t:file r_file_perms;
can_network_server(jabberd_t)
can_ypbind(jabberd_t)
allow jabberd_t self:unix_dgram_socket create_socket_perms;
allow jabberd_t self:unix_stream_socket create_socket_perms;
allow jabberd_t self:fifo_file { read write getattr };
allow jabberd_t self:capability dac_override;
# allow any user domain to connect to jabber
can_tcp_connect(userdomain, jabberd_t)