2005-04-29 17:45:15 +00:00
|
|
|
#DESC dante - socks daemon
|
|
|
|
|
#
|
|
|
|
|
# Author: petre rodan <kaiowas@gentoo.org>
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
type dante_conf_t, file_type, sysadmfile;
|
|
|
|
|
|
|
|
|
|
daemon_domain(dante)
|
|
|
|
|
can_network_server(dante_t)
|
|
|
|
|
|
|
|
|
|
allow dante_t self:fifo_file { read write };
|
2005-09-12 21:40:56 +00:00
|
|
|
allow dante_t self:capability { setuid setgid };
|
2005-04-29 17:45:15 +00:00
|
|
|
allow dante_t self:unix_dgram_socket { connect create write };
|
|
|
|
|
allow dante_t self:unix_stream_socket { connect create read setopt write };
|
2005-09-12 21:40:56 +00:00
|
|
|
allow dante_t self:tcp_socket connect;
|
2005-04-29 17:45:15 +00:00
|
|
|
|
|
|
|
|
allow dante_t socks_port_t:tcp_socket name_bind;
|
|
|
|
|
|
|
|
|
|
allow dante_t { etc_t etc_runtime_t }:file r_file_perms;
|
|
|
|
|
r_dir_file(dante_t, dante_conf_t)
|
2005-09-12 21:40:56 +00:00
|
|
|
|
|
|
|
|
allow dante_t initrc_var_run_t:file { getattr write };
|
|
|
|
|
|
