selinux-policy/strict/domains/program/unused/perdition.te

31 lines
781 B
Plaintext
Raw Normal View History

2005-04-29 17:45:15 +00:00
#DESC Perdition POP and IMAP proxy
#
# Author: Russell Coker <russell@coker.com.au>
# X-Debian-Packages: perdition
#
#################################
#
# Rules for the perdition_t domain.
#
daemon_domain(perdition)
allow perdition_t pop_port_t:tcp_socket name_bind;
etc_domain(perdition)
typealias perdition_etc_t alias etc_perdition_t;
# Use the network.
can_network_server(perdition_t)
allow perdition_t self:unix_stream_socket create_socket_perms;
allow perdition_t self:unix_dgram_socket create_socket_perms;
# allow any domain to connect to the proxy
can_tcp_connect(userdomain, perdition_t)
# Use capabilities
allow perdition_t self:capability { setgid setuid net_bind_service };
allow perdition_t etc_t:file { getattr read };
allow perdition_t etc_t:lnk_file read;