37 lines
1.0 KiB
Plaintext
37 lines
1.0 KiB
Plaintext
|
#DESC uptimed - a uptime daemon
|
||
|
|
#
|
||
|
|
# Author: Carsten Grohmann <carsten@securityenhancedlinux.de>
|
||
|
|
#
|
||
|
|
# Date: 19. June 2003
|
||
|
|
#
|
||
|
|
|
||
|
|
#################################
|
||
|
|
#
|
||
|
|
# General Types
|
||
|
|
#
|
||
|
|
|
||
|
|
type etc_uptimed_t, file_type, sysadmfile;
|
||
|
|
type uptimed_spool_t, file_type, sysadmfile;
|
||
|
|
|
||
|
|
#################################
|
||
|
|
#
|
||
|
|
# Rules for the uptimed_t domain.
|
||
|
|
#
|
||
|
|
daemon_domain(uptimed, `,privmail')
|
||
|
|
file_type_auto_trans(uptimed_t, var_spool_t, uptimed_spool_t)
|
||
|
|
allow uptimed_t { etc_uptimed_t proc_t }:file { getattr read };
|
||
|
|
read_locale(uptimed_t)
|
||
|
|
allow uptimed_t uptimed_spool_t:file create_file_perms;
|
||
|
|
allow uptimed_t self:unix_dgram_socket create_socket_perms;
|
||
|
|
|
||
|
|
# to send mail
|
||
|
|
can_exec(uptimed_t, shell_exec_t)
|
||
|
|
allow uptimed_t { bin_t sbin_t }:dir search;
|
||
|
|
allow uptimed_t bin_t:lnk_file read;
|
||
|
|
allow uptimed_t etc_runtime_t:file { getattr read };
|
||
|
|
allow uptimed_t self:fifo_file { getattr write };
|
||
|
|
|
||
|
|
# rules for uprecords - it runs in the user context
|
||
|
|
allow userdomain uptimed_spool_t:dir search;
|
||
|
|
allow userdomain uptimed_spool_t:file { getattr read };
|