27 lines
905 B
Plaintext
27 lines
905 B
Plaintext
|
#DESC clockspeed - Simple network time protocol client
|
||
|
|
#
|
||
|
|
# Author Petre Rodan <kaiowas@gentoo.org>
|
||
|
|
#
|
||
|
|
|
||
|
|
daemon_base_domain(clockspeed)
|
||
|
|
var_lib_domain(clockspeed)
|
||
|
|
can_network(clockspeed_t)
|
||
|
|
allow clockspeed_t port_type:tcp_socket name_connect;
|
||
|
|
read_locale(clockspeed_t)
|
||
|
|
|
||
|
|
allow clockspeed_t self:capability { sys_time net_bind_service };
|
||
|
|
allow clockspeed_t self:unix_dgram_socket create_socket_perms;
|
||
|
|
allow clockspeed_t self:unix_stream_socket create_socket_perms;
|
||
|
|
allow clockspeed_t clockspeed_port_t:udp_socket name_bind;
|
||
|
|
allow clockspeed_t domain:packet_socket recvfrom;
|
||
|
|
|
||
|
|
allow clockspeed_t var_t:dir search;
|
||
|
|
allow clockspeed_t clockspeed_var_lib_t:file create_file_perms;
|
||
|
|
allow clockspeed_t clockspeed_var_lib_t:fifo_file create_file_perms;
|
||
|
|
|
||
|
|
# sysadm can play with clockspeed
|
||
|
|
role sysadm_r types clockspeed_t;
|
||
|
|
ifdef(`targeted_policy', `', `
|
||
|
|
domain_auto_trans( sysadm_t, clockspeed_exec_t, clockspeed_t)
|
||
|
|
')
|