selinux-policy/mls/domains/program/unused/publicfile.te

26 lines
723 B
Plaintext
Raw Normal View History

2005-11-22 19:28:03 +00:00
#DESC Publicfile - HTTP and FTP file services
# http://cr.yp.to/publicfile.html
#
# Author: petre rodan <kaiowas@gentoo.org>
#
# this policy depends on ucspi-tcp
#
daemon_domain(publicfile)
type publicfile_content_t, file_type, sysadmfile;
domain_auto_trans(initrc_t, publicfile_exec_t, publicfile_t)
ifdef(`ucspi-tcp.te', `
domain_auto_trans(utcpserver_t, publicfile_exec_t, publicfile_t)
allow publicfile_t utcpserver_t:tcp_socket { read write };
allow utcpserver_t { ftp_data_port_t ftp_port_t http_port_t }:tcp_socket name_bind;
')
allow publicfile_t initrc_t:tcp_socket { read write };
allow publicfile_t self:capability { dac_override setgid setuid sys_chroot };
r_dir_file(publicfile_t, publicfile_content_t)