selinux-policy/strict/domains/program/radvd.te

30 lines
744 B
Plaintext
Raw Normal View History

2005-04-29 17:45:15 +00:00
#DESC Radv - IPv6 route advisory daemon
#
# Author: Russell Coker <russell@coker.com.au>
# X-Debian-Packages: radvd
#
#################################
#
# Rules for the radvd_t domain.
#
daemon_domain(radvd)
etc_domain(radvd)
allow radvd_t etc_t:file { getattr read };
allow radvd_t self:{ rawip_socket unix_dgram_socket } rw_socket_perms;
allow radvd_t self:capability net_raw;
allow radvd_t self:{ unix_dgram_socket rawip_socket } create;
allow radvd_t self:unix_stream_socket create_socket_perms;
can_network_server(radvd_t)
allow radvd_t proc_t:dir r_dir_perms;
allow radvd_t proc_t:file { getattr read };
allow radvd_t etc_t:lnk_file read;
allow radvd_t sysctl_net_t:file r_file_perms;
allow radvd_t sysctl_net_t:dir r_dir_perms;