47 lines
1.3 KiB
Plaintext
47 lines
1.3 KiB
Plaintext
|
#DESC canna - A Japanese character set input system.
|
||
|
|
#
|
||
|
|
# Authors: Dan Walsh <dwalsh@redhat.com>
|
||
|
|
#
|
||
|
|
#
|
||
|
|
|
||
|
|
#################################
|
||
|
|
#
|
||
|
|
# Rules for the canna_t domain.
|
||
|
|
#
|
||
|
|
daemon_domain(canna)
|
||
|
|
|
||
|
|
file_type_auto_trans(canna_t, var_run_t, canna_var_run_t, sock_file)
|
||
|
|
|
||
|
|
logdir_domain(canna)
|
||
|
|
var_lib_domain(canna)
|
||
|
|
|
||
|
|
allow canna_t self:capability { setgid setuid net_bind_service };
|
||
|
|
allow canna_t tmp_t:dir { search };
|
||
|
|
allow canna_t self:unix_stream_socket { connectto create_stream_socket_perms};
|
||
|
|
allow canna_t self:unix_dgram_socket create_stream_socket_perms;
|
||
|
|
allow canna_t etc_t:file { getattr read };
|
||
|
|
allow canna_t usr_t:file { getattr read };
|
||
|
|
|
||
|
|
allow canna_t proc_t:file r_file_perms;
|
||
|
|
allow canna_t etc_runtime_t:file r_file_perms;
|
||
|
|
allow canna_t canna_var_lib_t:dir create;
|
||
|
|
|
||
|
|
rw_dir_create_file(canna_t, canna_var_lib_t)
|
||
|
|
|
||
|
|
can_network_tcp(canna_t)
|
||
|
|
allow canna_t port_type:tcp_socket name_connect;
|
||
|
|
can_ypbind(canna_t)
|
||
|
|
|
||
|
|
allow userdomain canna_var_run_t:dir search;
|
||
|
|
allow userdomain canna_var_run_t:sock_file write;
|
||
|
|
can_unix_connect(userdomain, canna_t)
|
||
|
|
|
||
|
|
ifdef(`i18n_input.te', `
|
||
|
|
allow i18n_input_t canna_var_run_t:dir search;
|
||
|
|
allow i18n_input_t canna_var_run_t:sock_file write;
|
||
|
|
can_unix_connect(i18n_input_t, canna_t)
|
||
|
|
')
|
||
|
|
|
||
|
|
dontaudit canna_t kernel_t:fd use;
|
||
|
|
dontaudit canna_t root_t:file read;
|