selinux-policy/policy/modules/services/passenger.if

68 lines
1.6 KiB
Plaintext
Raw Normal View History

2010-09-13 09:49:37 +00:00
## <summary>Passenger policy</summary>
######################################
## <summary>
## Execute passenger in the passenger domain.
2010-09-13 09:49:37 +00:00
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
2010-09-13 09:49:37 +00:00
## </param>
#
interface(`passenger_domtrans',`
gen_require(`
Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Syntax error. Squash me with 959aa527a5394d23b994ecf75347d2445106d0c4 Replace type and attributes statements by comma delimiters where possible. Syntax error. Squach me with 779a708452142d6e4ac2ba2a158f724782a03291 Replace type and attributes statements by comma delimiters where possible. Syntax error. Squash me with 89180ea115794aadddaa9b356ab1dfcdc9ff102
2010-09-20 10:09:09 +00:00
type passenger_t, passenger_exec_t;
')
2010-09-13 09:49:37 +00:00
allow $1 self:capability { fowner fsetid };
allow $1 passenger_t:process signal;
domtrans_pattern($1, passenger_exec_t, passenger_t)
allow $1 passenger_t:unix_stream_socket { read write shutdown };
allow passenger_t $1:unix_stream_socket { read write };
')
######################################
## <summary>
## Manage passenger var_run content.
2010-09-13 09:49:37 +00:00
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
2010-09-13 09:49:37 +00:00
## </param>
#
2010-09-13 14:26:10 +00:00
interface(`passenger_manage_pid_content',`
gen_require(`
type passenger_var_run_t;
')
2010-09-13 09:49:37 +00:00
files_search_pids($1)
2010-09-13 14:26:10 +00:00
manage_dirs_pattern($1, passenger_var_run_t, passenger_var_run_t)
manage_files_pattern($1, passenger_var_run_t, passenger_var_run_t)
2010-09-13 14:26:10 +00:00
manage_fifo_files_pattern($1, passenger_var_run_t, passenger_var_run_t)
manage_sock_files_pattern($1, passenger_var_run_t, passenger_var_run_t)
2010-09-13 09:49:37 +00:00
')
########################################
## <summary>
## Read passenger lib files
2010-09-13 09:49:37 +00:00
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
2010-09-13 09:49:37 +00:00
## </param>
#
interface(`passenger_read_lib_files',`
gen_require(`
type passenger_var_lib_t;
')
2010-09-13 09:49:37 +00:00
files_search_var_lib($1)
read_files_pattern($1, passenger_var_lib_t, passenger_var_lib_t)
read_lnk_files_pattern($1, passenger_var_lib_t, passenger_var_lib_t)
2010-09-13 09:49:37 +00:00
')