2006-01-16 18:30:14 +00:00
|
|
|
## <summary>small and secure DNS daemon</summary>
|
|
|
|
|
|
|
|
|
|
########################################
|
|
|
|
|
## <summary>
|
|
|
|
|
## Create a set of derived types for djbdns
|
|
|
|
|
## components that are directly supervised by daemontools.
|
|
|
|
|
## </summary>
|
|
|
|
|
## <param name="prefix">
|
2006-02-10 18:41:53 +00:00
|
|
|
## <summary>
|
2006-01-16 18:30:14 +00:00
|
|
|
## The prefix to be used for deriving type names.
|
2006-02-10 18:41:53 +00:00
|
|
|
## </summary>
|
2006-01-16 18:30:14 +00:00
|
|
|
## </param>
|
|
|
|
|
#
|
|
|
|
|
template(`djbdns_daemontools_domain_template',`
|
|
|
|
|
|
|
|
|
|
type djbdns_$1_t;
|
|
|
|
|
type djbdns_$1_exec_t;
|
|
|
|
|
type djbdns_$1_conf_t;
|
|
|
|
|
files_config_file(djbdns_$1_conf_t)
|
|
|
|
|
|
|
|
|
|
domain_type(djbdns_$1_t)
|
|
|
|
|
domain_entry_file(djbdns_$1_t,djbdns_$1_exec_t)
|
|
|
|
|
role system_r types djbdns_$1_t;
|
|
|
|
|
|
|
|
|
|
daemontools_service_domain(djbdns_$1_t, djbdns_$1_exec_t)
|
|
|
|
|
daemontools_read_svc(djbdns_$1_t)
|
|
|
|
|
|
|
|
|
|
allow djbdns_$1_t self:capability { net_bind_service setgid setuid sys_chroot };
|
|
|
|
|
allow djbdns_$1_t self:tcp_socket create_stream_socket_perms;
|
|
|
|
|
allow djbdns_$1_t self:udp_socket create_socket_perms;
|
|
|
|
|
|
2006-12-12 20:08:08 +00:00
|
|
|
allow djbdns_$1_t djbdns_$1_conf_t:dir list_dir_perms;
|
|
|
|
|
allow djbdns_$1_t djbdns_$1_conf_t:file read_file_perms;
|
2006-01-16 18:30:14 +00:00
|
|
|
|
2007-06-27 15:23:21 +00:00
|
|
|
corenet_all_recvfrom_unlabeled(djbdns_$1_t)
|
|
|
|
|
corenet_all_recvfrom_netlabel(djbdns_$1_t)
|
2006-01-16 18:30:14 +00:00
|
|
|
corenet_tcp_sendrecv_all_if(djbdns_$1_t)
|
|
|
|
|
corenet_udp_sendrecv_all_if(djbdns_$1_t)
|
|
|
|
|
corenet_tcp_sendrecv_all_nodes(djbdns_$1_t)
|
|
|
|
|
corenet_udp_sendrecv_all_nodes(djbdns_$1_t)
|
|
|
|
|
corenet_tcp_sendrecv_all_ports(djbdns_$1_t)
|
|
|
|
|
corenet_udp_sendrecv_all_ports(djbdns_$1_t)
|
|
|
|
|
corenet_tcp_bind_all_nodes(djbdns_$1_t)
|
|
|
|
|
corenet_udp_bind_all_nodes(djbdns_$1_t)
|
|
|
|
|
corenet_tcp_bind_dns_port(djbdns_$1_t)
|
|
|
|
|
corenet_udp_bind_dns_port(djbdns_$1_t)
|
2006-01-16 22:00:09 +00:00
|
|
|
corenet_udp_bind_generic_port(djbdns_$1_t)
|
2006-06-02 15:06:45 +00:00
|
|
|
corenet_sendrecv_dns_server_packets(djbdns_$1_t)
|
|
|
|
|
corenet_sendrecv_generic_server_packets(djbdns_$1_t)
|
2006-01-16 18:30:14 +00:00
|
|
|
|
|
|
|
|
files_search_var(djbdns_$1_t)
|
|
|
|
|
|
|
|
|
|
libs_use_ld_so(djbdns_$1_t)
|
|
|
|
|
libs_use_shared_libs(djbdns_$1_t)
|
|
|
|
|
')
|
