26 lines
723 B
Plaintext
26 lines
723 B
Plaintext
|
#DESC Publicfile - HTTP and FTP file services
|
||
|
|
# http://cr.yp.to/publicfile.html
|
||
|
|
#
|
||
|
|
# Author: petre rodan <kaiowas@gentoo.org>
|
||
|
|
#
|
||
|
|
# this policy depends on ucspi-tcp
|
||
|
|
#
|
||
|
|
|
||
|
|
daemon_domain(publicfile)
|
||
|
|
type publicfile_content_t, file_type, sysadmfile;
|
||
|
|
domain_auto_trans(initrc_t, publicfile_exec_t, publicfile_t)
|
||
|
|
|
||
|
|
ifdef(`ucspi-tcp.te', `
|
||
|
|
domain_auto_trans(utcpserver_t, publicfile_exec_t, publicfile_t)
|
||
|
|
allow publicfile_t utcpserver_t:tcp_socket { read write };
|
||
|
|
allow utcpserver_t { ftp_data_port_t ftp_port_t http_port_t }:tcp_socket name_bind;
|
||
|
|
')
|
||
|
|
|
||
|
|
allow publicfile_t initrc_t:tcp_socket { read write };
|
||
|
|
|
||
|
|
allow publicfile_t self:capability { dac_override setgid setuid sys_chroot };
|
||
|
|
|
||
|
|
r_dir_file(publicfile_t, publicfile_content_t)
|
||
|
|
|
||
|
|
|