2005-04-29 17:45:15 +00:00
|
|
|
#DESC uptimed - a uptime daemon
|
|
|
|
|
#
|
|
|
|
|
# Author: Carsten Grohmann <carsten@securityenhancedlinux.de>
|
|
|
|
|
#
|
|
|
|
|
# Date: 19. June 2003
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
#################################
|
|
|
|
|
#
|
|
|
|
|
# General Types
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
type uptimed_spool_t, file_type, sysadmfile;
|
|
|
|
|
|
|
|
|
|
#################################
|
|
|
|
|
#
|
|
|
|
|
# Rules for the uptimed_t domain.
|
|
|
|
|
#
|
|
|
|
|
daemon_domain(uptimed, `,privmail')
|
2005-09-12 21:40:56 +00:00
|
|
|
etc_domain(uptimed)
|
|
|
|
|
typealias uptimed_etc_t alias etc_uptimed_t;
|
2005-04-29 17:45:15 +00:00
|
|
|
file_type_auto_trans(uptimed_t, var_spool_t, uptimed_spool_t)
|
2005-09-12 21:40:56 +00:00
|
|
|
allow uptimed_t proc_t:file { getattr read };
|
2005-04-29 17:45:15 +00:00
|
|
|
read_locale(uptimed_t)
|
|
|
|
|
allow uptimed_t uptimed_spool_t:file create_file_perms;
|
|
|
|
|
allow uptimed_t self:unix_dgram_socket create_socket_perms;
|
|
|
|
|
|
|
|
|
|
# to send mail
|
|
|
|
|
can_exec(uptimed_t, shell_exec_t)
|
|
|
|
|
allow uptimed_t { bin_t sbin_t }:dir search;
|
|
|
|
|
allow uptimed_t bin_t:lnk_file read;
|
|
|
|
|
allow uptimed_t etc_runtime_t:file { getattr read };
|
|
|
|
|
allow uptimed_t self:fifo_file { getattr write };
|
|
|
|
|
|
|
|
|
|
# rules for uprecords - it runs in the user context
|
|
|
|
|
allow userdomain uptimed_spool_t:dir search;
|
|
|
|
|
allow userdomain uptimed_spool_t:file { getattr read };
|
