2010-09-15 14:42:34 +00:00
|
|
|
policy_module(djbdns, 1.4.1)
|
2006-01-16 18:30:14 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Declarations
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
type djbdns_axfrdns_t;
|
|
|
|
|
type djbdns_axfrdns_exec_t;
|
|
|
|
|
domain_type(djbdns_axfrdns_t)
|
2008-07-23 21:38:39 +00:00
|
|
|
domain_entry_file(djbdns_axfrdns_t, djbdns_axfrdns_exec_t)
|
2006-01-16 18:30:14 +00:00
|
|
|
role system_r types djbdns_axfrdns_t;
|
2010-08-30 15:20:58 +00:00
|
|
|
|
|
|
|
|
type djbdns_axfrdns_conf_t;
|
2006-01-16 18:30:14 +00:00
|
|
|
files_config_file(djbdns_axfrdns_conf_t)
|
|
|
|
|
|
|
|
|
|
djbdns_daemontools_domain_template(dnscache)
|
|
|
|
|
|
|
|
|
|
djbdns_daemontools_domain_template(tinydns)
|
|
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Local policy for axfrdns component
|
|
|
|
|
#
|
|
|
|
|
|
2010-08-26 13:41:21 +00:00
|
|
|
files_config_file(djbdns_axfrdns_conf_t)
|
|
|
|
|
|
2006-01-16 18:30:14 +00:00
|
|
|
daemontools_ipc_domain(djbdns_axfrdns_t)
|
|
|
|
|
daemontools_read_svc(djbdns_axfrdns_t)
|
|
|
|
|
|
|
|
|
|
allow djbdns_axfrdns_t self:capability { setuid setgid sys_chroot };
|
|
|
|
|
|
2006-12-12 20:08:08 +00:00
|
|
|
allow djbdns_axfrdns_t djbdns_axfrdns_conf_t:dir list_dir_perms;
|
|
|
|
|
allow djbdns_axfrdns_t djbdns_axfrdns_conf_t:file read_file_perms;
|
2006-01-16 18:30:14 +00:00
|
|
|
|
2006-12-12 20:08:08 +00:00
|
|
|
allow djbdns_axfrdns_t djbdns_tinydns_t:dir list_dir_perms;
|
|
|
|
|
allow djbdns_axfrdns_t djbdns_tinydns_t:file read_file_perms;
|
2006-01-16 18:30:14 +00:00
|
|
|
|
2006-12-12 20:08:08 +00:00
|
|
|
allow djbdns_axfrdns_t djbdns_tinydns_conf_t:dir list_dir_perms;
|
|
|
|
|
allow djbdns_axfrdns_t djbdns_tinydns_conf_t:file read_file_perms;
|
2006-01-16 18:30:14 +00:00
|
|
|
|
|
|
|
|
files_search_var(djbdns_axfrdns_t)
|
|
|
|
|
|
|
|
|
|
ucspitcp_service_domain(djbdns_axfrdns_t, djbdns_axfrdns_exec_t)
|
2010-04-20 13:32:25 +00:00
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
#
|
|
|
|
|
# Local policy for tinydns
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
init_dontaudit_use_script_fds(djbdns_tinydns_t)
|
