31 lines
717 B
Plaintext
31 lines
717 B
Plaintext
|
#DESC Authbind - Program to bind to low ports as non-root
|
||
|
|
#
|
||
|
|
# Authors: Russell Coker <russell@coker.com.au>
|
||
|
|
# X-Debian-Packages: authbind
|
||
|
|
#
|
||
|
|
|
||
|
|
#################################
|
||
|
|
#
|
||
|
|
# Rules for the authbind_t domain.
|
||
|
|
#
|
||
|
|
# authbind_exec_t is the type of the authbind executable.
|
||
|
|
#
|
||
|
|
type authbind_t, domain, privlog;
|
||
|
|
type authbind_exec_t, file_type, sysadmfile, exec_type;
|
||
|
|
|
||
|
|
role system_r types authbind_t;
|
||
|
|
|
||
|
|
etcdir_domain(authbind)
|
||
|
|
typealias authbind_etc_t alias etc_authbind_t;
|
||
|
|
|
||
|
|
can_exec(authbind_t, authbind_etc_t)
|
||
|
|
allow authbind_t etc_t:dir r_dir_perms;
|
||
|
|
|
||
|
|
uses_shlib(authbind_t)
|
||
|
|
|
||
|
|
allow authbind_t self:capability net_bind_service;
|
||
|
|
|
||
|
|
allow authbind_t domain:fd use;
|
||
|
|
|
||
|
|
allow authbind_t console_device_t:chr_file { read write };
|