selinux-policy/policy/modules/admin/amanda.te

policy_module(amanda, 1.12.1)

#######################################
#
# Declarations
#

type amanda_t;
type amanda_inetd_exec_t;
inetd_service_domain(amanda_t, amanda_inetd_exec_t)
role system_r types amanda_t;

type amanda_exec_t;
domain_entry_file(amanda_t, amanda_exec_t)

type amanda_log_t;
logging_log_file(amanda_log_t)

type amanda_config_t;
files_type(amanda_config_t)

type amanda_usr_lib_t;
files_type(amanda_usr_lib_t)

type amanda_var_lib_t;
files_type(amanda_var_lib_t)

type amanda_gnutarlists_t;
files_type(amanda_gnutarlists_t)

type amanda_tmp_t;
files_tmp_file(amanda_tmp_t)

type amanda_amandates_t;
files_type(amanda_amandates_t)

type amanda_dumpdates_t;
files_type(amanda_dumpdates_t)

type amanda_data_t;
files_type(amanda_data_t)

type amanda_recover_t;
type amanda_recover_exec_t;
application_domain(amanda_recover_t, amanda_recover_exec_t)
role system_r types amanda_recover_t;

type amanda_recover_dir_t;
files_type(amanda_recover_dir_t)

optional_policy(`
	prelink_object_file(amanda_usr_lib_t)
')

########################################
#
# Amanda local policy
#

allow amanda_t self:capability { chown dac_override setuid kill };
allow amanda_t self:process { setpgid signal };
allow amanda_t self:fifo_file rw_fifo_file_perms;
allow amanda_t self:unix_stream_socket create_stream_socket_perms;
allow amanda_t self:unix_dgram_socket create_socket_perms;
allow amanda_t self:tcp_socket create_stream_socket_perms;
allow amanda_t self:udp_socket create_socket_perms;

allow amanda_t amanda_amandates_t:file rw_file_perms;

allow amanda_t amanda_config_t:file read_file_perms;

manage_dirs_pattern(amanda_t, amanda_data_t, amanda_data_t)
manage_files_pattern(amanda_t, amanda_data_t, amanda_data_t)
filetrans_pattern(amanda_t, amanda_config_t, amanda_data_t, { file dir })

allow amanda_t amanda_dumpdates_t:file rw_file_perms;

can_exec(amanda_t, amanda_exec_t)
can_exec(amanda_t, amanda_inetd_exec_t)

allow amanda_t amanda_gnutarlists_t:dir rw_dir_perms;
allow amanda_t amanda_gnutarlists_t:file manage_file_perms;
allow amanda_t amanda_gnutarlists_t:lnk_file manage_lnk_file_perms;

manage_dirs_pattern(amanda_t, amanda_var_lib_t, amanda_var_lib_t)
manage_files_pattern(amanda_t, amanda_var_lib_t, amanda_var_lib_t)

manage_files_pattern(amanda_t, amanda_log_t, amanda_log_t)
manage_dirs_pattern(amanda_t, amanda_log_t, amanda_log_t)
logging_log_filetrans(amanda_t, amanda_log_t, { file dir })

manage_files_pattern(amanda_t, amanda_tmp_t, amanda_tmp_t)
manage_dirs_pattern(amanda_t, amanda_tmp_t, amanda_tmp_t)
files_tmp_filetrans(amanda_t, amanda_tmp_t, { file dir })

kernel_read_system_state(amanda_t)
kernel_read_kernel_sysctls(amanda_t)
kernel_dontaudit_getattr_unlabeled_files(amanda_t)
kernel_dontaudit_read_proc_symlinks(amanda_t)

corecmd_exec_shell(amanda_t)
corecmd_exec_bin(amanda_t)

corenet_all_recvfrom_unlabeled(amanda_t)
corenet_all_recvfrom_netlabel(amanda_t)
corenet_tcp_sendrecv_generic_if(amanda_t)
corenet_udp_sendrecv_generic_if(amanda_t)
corenet_raw_sendrecv_generic_if(amanda_t)
corenet_tcp_sendrecv_generic_node(amanda_t)
corenet_udp_sendrecv_generic_node(amanda_t)
corenet_raw_sendrecv_generic_node(amanda_t)
corenet_tcp_sendrecv_all_ports(amanda_t)
corenet_udp_sendrecv_all_ports(amanda_t)
corenet_tcp_bind_generic_node(amanda_t)
corenet_udp_bind_generic_node(amanda_t)
corenet_tcp_bind_all_rpc_ports(amanda_t)
corenet_tcp_bind_generic_port(amanda_t)
corenet_dontaudit_tcp_bind_all_ports(amanda_t)

dev_getattr_all_blk_files(amanda_t)
dev_getattr_all_chr_files(amanda_t)

files_read_etc_files(amanda_t)
files_read_etc_runtime_files(amanda_t)
files_list_all(amanda_t)
files_read_all_files(amanda_t)
files_read_all_symlinks(amanda_t)
files_read_all_blk_files(amanda_t)
files_read_all_chr_files(amanda_t)
files_getattr_all_pipes(amanda_t)
files_getattr_all_sockets(amanda_t)

fs_getattr_xattr_fs(amanda_t)
fs_list_all(amanda_t)

storage_raw_read_fixed_disk(amanda_t)
storage_read_tape(amanda_t)
storage_write_tape(amanda_t)

auth_use_nsswitch(amanda_t)
auth_read_shadow(amanda_t)

logging_send_syslog_msg(amanda_t)

########################################
#
# Amanda recover local policy
#

allow amanda_recover_t self:capability { fowner fsetid kill setgid setuid chown dac_override };
allow amanda_recover_t self:process { sigkill sigstop signal };
allow amanda_recover_t self:fifo_file rw_fifo_file_perms;
allow amanda_recover_t self:unix_stream_socket { connect create read write };
allow amanda_recover_t self:tcp_socket create_stream_socket_perms;
allow amanda_recover_t self:udp_socket create_socket_perms;

manage_files_pattern(amanda_recover_t, amanda_log_t, amanda_log_t)
manage_lnk_files_pattern(amanda_recover_t, amanda_log_t, amanda_log_t)

manage_dirs_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)
manage_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)
manage_lnk_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)
manage_fifo_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)
manage_sock_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)
userdom_user_home_dir_filetrans(amanda_recover_t, amanda_recover_dir_t, { dir file lnk_file sock_file fifo_file })

manage_dirs_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)
manage_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)
manage_lnk_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)
manage_fifo_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)
manage_sock_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)
files_tmp_filetrans(amanda_recover_t, amanda_tmp_t, { dir file lnk_file sock_file fifo_file })

kernel_read_system_state(amanda_recover_t)
kernel_read_kernel_sysctls(amanda_recover_t)

corecmd_exec_shell(amanda_recover_t)
corecmd_exec_bin(amanda_recover_t)

corenet_all_recvfrom_unlabeled(amanda_recover_t)
corenet_all_recvfrom_netlabel(amanda_recover_t)
corenet_tcp_sendrecv_generic_if(amanda_recover_t)
corenet_udp_sendrecv_generic_if(amanda_recover_t)
corenet_tcp_sendrecv_generic_node(amanda_recover_t)
corenet_udp_sendrecv_generic_node(amanda_recover_t)
corenet_tcp_sendrecv_all_ports(amanda_recover_t)
corenet_udp_sendrecv_all_ports(amanda_recover_t)
corenet_tcp_bind_generic_node(amanda_recover_t)
corenet_udp_bind_generic_node(amanda_recover_t)
corenet_tcp_bind_reserved_port(amanda_recover_t)
corenet_tcp_connect_amanda_port(amanda_recover_t)
corenet_sendrecv_amanda_client_packets(amanda_recover_t)

domain_use_interactive_fds(amanda_recover_t)

files_read_etc_files(amanda_recover_t)
files_read_etc_runtime_files(amanda_recover_t)
files_search_tmp(amanda_recover_t)
files_search_pids(amanda_recover_t)

auth_use_nsswitch(amanda_recover_t)

fstools_domtrans(amanda_t)
fstools_signal(amanda_t)

logging_search_logs(amanda_recover_t)

miscfiles_read_localization(amanda_recover_t)

userdom_use_user_terminals(amanda_recover_t)
userdom_search_user_home_content(amanda_recover_t)
Module version bump for 8296eb2. 2010-09-10 12:51:54 +00:00			`policy_module(amanda, 1.12.1)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`#######################################`
			`#`
			`# Declarations`
			`#`

			`type amanda_t;`
			`type amanda_inetd_exec_t;`
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`inetd_service_domain(amanda_t, amanda_inetd_exec_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`role system_r types amanda_t;`

			`type amanda_exec_t;`
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`domain_entry_file(amanda_t, amanda_exec_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`type amanda_log_t;`
			`logging_log_file(amanda_log_t)`

			`type amanda_config_t;`
			`files_type(amanda_config_t)`

			`type amanda_usr_lib_t;`
			`files_type(amanda_usr_lib_t)`

			`type amanda_var_lib_t;`
			`files_type(amanda_var_lib_t)`

			`type amanda_gnutarlists_t;`
			`files_type(amanda_gnutarlists_t)`

			`type amanda_tmp_t;`
			`files_tmp_file(amanda_tmp_t)`

			`type amanda_amandates_t;`
			`files_type(amanda_amandates_t)`

			`type amanda_dumpdates_t;`
			`files_type(amanda_dumpdates_t)`

			`type amanda_data_t;`
			`files_type(amanda_data_t)`

			`type amanda_recover_t;`
			`type amanda_recover_exec_t;`
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`application_domain(amanda_recover_t, amanda_recover_exec_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`role system_r types amanda_recover_t;`

			`type amanda_recover_dir_t;`
			`files_type(amanda_recover_dir_t)`

deprecate module name as first parameter of optional_policy() 2006-03-24 16:13:54 +00:00			optional_policy(`
add prelink. 2006-01-11 23:20:28 +00:00			`prelink_object_file(amanda_usr_lib_t)`
			`')`

add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`########################################`
			`#`
			`# Amanda local policy`
			`#`

patch from dan Sun, 19 Feb 2006 08:16:18 -0500 2006-02-20 16:31:54 +00:00			`allow amanda_t self:capability { chown dac_override setuid kill };`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`allow amanda_t self:process { setpgid signal };`
trunk: minor amanda update from dan 2007-06-27 19:19:20 +00:00			`allow amanda_t self:fifo_file rw_fifo_file_perms;`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`allow amanda_t self:unix_stream_socket create_stream_socket_perms;`
			`allow amanda_t self:unix_dgram_socket create_socket_perms;`
			`allow amanda_t self:tcp_socket create_stream_socket_perms;`
			`allow amanda_t self:udp_socket create_socket_perms;`

trunk: Enable open permission checks policy capability. 2008-10-16 16:09:20 +00:00			`allow amanda_t amanda_amandates_t:file rw_file_perms;`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: Enable open permission checks policy capability. 2008-10-16 16:09:20 +00:00			`allow amanda_t amanda_config_t:file read_file_perms;`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: 11 more cherry picks from fedora policy, by david hardeman. 2008-08-07 14:17:50 +00:00			`manage_dirs_pattern(amanda_t, amanda_data_t, amanda_data_t)`
			`manage_files_pattern(amanda_t, amanda_data_t, amanda_data_t)`
			`filetrans_pattern(amanda_t, amanda_config_t, amanda_data_t, { file dir })`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: Enable open permission checks policy capability. 2008-10-16 16:09:20 +00:00			`allow amanda_t amanda_dumpdates_t:file rw_file_perms;`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`can_exec(amanda_t, amanda_exec_t)`
			`can_exec(amanda_t, amanda_inetd_exec_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`allow amanda_t amanda_gnutarlists_t:dir rw_dir_perms;`
			`allow amanda_t amanda_gnutarlists_t:file manage_file_perms;`
trunk: start adding open perm to obvious places. 2008-05-23 18:22:57 +00:00			`allow amanda_t amanda_gnutarlists_t:lnk_file manage_lnk_file_perms;`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: whitespace fixes 2009-06-26 14:40:13 +00:00			`manage_dirs_pattern(amanda_t, amanda_var_lib_t, amanda_var_lib_t)`
			`manage_files_pattern(amanda_t, amanda_var_lib_t, amanda_var_lib_t)`
trunk: minor amanda update from dan 2007-06-27 19:19:20 +00:00
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`manage_files_pattern(amanda_t, amanda_log_t, amanda_log_t)`
			`manage_dirs_pattern(amanda_t, amanda_log_t, amanda_log_t)`
			`logging_log_filetrans(amanda_t, amanda_log_t, { file dir })`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`manage_files_pattern(amanda_t, amanda_tmp_t, amanda_tmp_t)`
			`manage_dirs_pattern(amanda_t, amanda_tmp_t, amanda_tmp_t)`
another round of renaming 2006-02-21 18:40:44 +00:00			`files_tmp_filetrans(amanda_t, amanda_tmp_t, { file dir })`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`kernel_read_system_state(amanda_t)`
renaming from 20060131 interface review, round 2 2006-01-31 16:49:43 +00:00			`kernel_read_kernel_sysctls(amanda_t)`
			`kernel_dontaudit_getattr_unlabeled_files(amanda_t)`
			`kernel_dontaudit_read_proc_symlinks(amanda_t)`
Reduced the number of differences in amanda between the targeted and the refpolicy 2005-10-24 21:35:50 +00:00
trunk: reorganize amanda and bind 2007-10-12 17:50:11 +00:00			`corecmd_exec_shell(amanda_t)`
			`corecmd_exec_bin(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: Unified labeled networking policy from Paul Moore. The latest revision of the labeled policy patches which enable both labeled and unlabeled policy support for NetLabel. This revision takes into account Chris' feedback from the first version and reduces the number of interface calls in each domain down to two at present: one for unlabeled access, one for NetLabel access. The older, transport layer specific interfaces, are still present for use by third-party modules but are not used in the default policy modules. trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore. This patch changes the policy to use the netmsg initial SID as the "base" SID/context for NetLabel packets which only have MLS security attributes. Currently we use the unlabeled initial SID which makes it very difficult to distinquish between actual unlabeled packets and those packets which have MLS security attributes. 2007-06-27 15:23:21 +00:00			`corenet_all_recvfrom_unlabeled(amanda_t)`
			`corenet_all_recvfrom_netlabel(amanda_t)`
trunk: change network interface access from all to generic network interfaces. 2009-01-06 20:24:10 +00:00			`corenet_tcp_sendrecv_generic_if(amanda_t)`
			`corenet_udp_sendrecv_generic_if(amanda_t)`
			`corenet_raw_sendrecv_generic_if(amanda_t)`
trunk: Remove node definitions and change node usage to generic nodes. 2009-01-09 19:48:02 +00:00			`corenet_tcp_sendrecv_generic_node(amanda_t)`
			`corenet_udp_sendrecv_generic_node(amanda_t)`
			`corenet_raw_sendrecv_generic_node(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`corenet_tcp_sendrecv_all_ports(amanda_t)`
			`corenet_udp_sendrecv_all_ports(amanda_t)`
trunk: Remove node definitions and change node usage to generic nodes. 2009-01-09 19:48:02 +00:00			`corenet_tcp_bind_generic_node(amanda_t)`
			`corenet_udp_bind_generic_node(amanda_t)`
patch from dan Tue, 24 Oct 2006 11:00:28 -0400 2006-10-31 21:01:48 +00:00			`corenet_tcp_bind_all_rpc_ports(amanda_t)`
trunk: 8 patches from dan. 2008-10-13 15:06:23 +00:00			`corenet_tcp_bind_generic_port(amanda_t)`
			`corenet_dontaudit_tcp_bind_all_ports(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`dev_getattr_all_blk_files(amanda_t)`
fixes from sediff 2005-10-24 00:54:39 +00:00			`dev_getattr_all_chr_files(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`files_read_etc_files(amanda_t)`
			`files_read_etc_runtime_files(amanda_t)`
renaming from 20060131 interface review, round 3 2006-01-31 19:21:01 +00:00			`files_list_all(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`files_read_all_files(amanda_t)`
			`files_read_all_symlinks(amanda_t)`
renaming from 20060131 interface review, round 3 2006-01-31 19:21:01 +00:00			`files_read_all_blk_files(amanda_t)`
			`files_read_all_chr_files(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`files_getattr_all_pipes(amanda_t)`
			`files_getattr_all_sockets(amanda_t)`

trunk: reorganize amanda and bind 2007-10-12 17:50:11 +00:00			`fs_getattr_xattr_fs(amanda_t)`
			`fs_list_all(amanda_t)`

			`storage_raw_read_fixed_disk(amanda_t)`
trunk: 11 more cherry picks from fedora policy, by david hardeman. 2008-08-07 14:17:50 +00:00			`storage_read_tape(amanda_t)`
			`storage_write_tape(amanda_t)`
trunk: reorganize amanda and bind 2007-10-12 17:50:11 +00:00
trunk: 2 patches from dan. 2007-10-12 17:35:56 +00:00			`auth_use_nsswitch(amanda_t)`
			`auth_read_shadow(amanda_t)`

Clean up Amanda module. Signed-off-by: Dominick Grift <domg472@gmail.com> 2010-09-03 15:46:51 +00:00			`logging_send_syslog_msg(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`########################################`
			`#`
			`# Amanda recover local policy`
Clean up Amanda module. Signed-off-by: Dominick Grift <domg472@gmail.com> 2010-09-03 15:46:51 +00:00			`#`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
first part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:32:54 +00:00			`allow amanda_recover_t self:capability { fowner fsetid kill setgid setuid chown dac_override };`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`allow amanda_recover_t self:process { sigkill sigstop signal };`
trunk: Enable open permission checks policy capability. 2008-10-16 16:09:20 +00:00			`allow amanda_recover_t self:fifo_file rw_fifo_file_perms;`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`allow amanda_recover_t self:unix_stream_socket { connect create read write };`
			`allow amanda_recover_t self:tcp_socket create_stream_socket_perms;`
			`allow amanda_recover_t self:udp_socket create_socket_perms;`

trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`manage_files_pattern(amanda_recover_t, amanda_log_t, amanda_log_t)`
			`manage_lnk_files_pattern(amanda_recover_t, amanda_log_t, amanda_log_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00			`manage_dirs_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)`
			`manage_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)`
			`manage_lnk_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)`
			`manage_fifo_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)`
			`manage_sock_files_pattern(amanda_recover_t, amanda_recover_dir_t, amanda_recover_dir_t)`
trunk: merge UBAC. 2008-11-05 16:10:46 +00:00			`userdom_user_home_dir_filetrans(amanda_recover_t, amanda_recover_dir_t, { dir file lnk_file sock_file fifo_file })`
trunk: massive whitespace cleanup from dominick grift. 2008-07-23 21:38:39 +00:00
			`manage_dirs_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)`
			`manage_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)`
			`manage_lnk_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)`
			`manage_fifo_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)`
			`manage_sock_files_pattern(amanda_recover_t, amanda_tmp_t, amanda_tmp_t)`
			`files_tmp_filetrans(amanda_recover_t, amanda_tmp_t, { dir file lnk_file sock_file fifo_file })`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`kernel_read_system_state(amanda_recover_t)`
renaming from 20060131 interface review, round 2 2006-01-31 16:49:43 +00:00			`kernel_read_kernel_sysctls(amanda_recover_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
trunk: reorganize amanda and bind 2007-10-12 17:50:11 +00:00			`corecmd_exec_shell(amanda_recover_t)`
			`corecmd_exec_bin(amanda_recover_t)`

trunk: Unified labeled networking policy from Paul Moore. The latest revision of the labeled policy patches which enable both labeled and unlabeled policy support for NetLabel. This revision takes into account Chris' feedback from the first version and reduces the number of interface calls in each domain down to two at present: one for unlabeled access, one for NetLabel access. The older, transport layer specific interfaces, are still present for use by third-party modules but are not used in the default policy modules. trunk: Use netmsg initial SID for MLS-only Netlabel packets, from Paul Moore. This patch changes the policy to use the netmsg initial SID as the "base" SID/context for NetLabel packets which only have MLS security attributes. Currently we use the unlabeled initial SID which makes it very difficult to distinquish between actual unlabeled packets and those packets which have MLS security attributes. 2007-06-27 15:23:21 +00:00			`corenet_all_recvfrom_unlabeled(amanda_recover_t)`
			`corenet_all_recvfrom_netlabel(amanda_recover_t)`
trunk: change network interface access from all to generic network interfaces. 2009-01-06 20:24:10 +00:00			`corenet_tcp_sendrecv_generic_if(amanda_recover_t)`
			`corenet_udp_sendrecv_generic_if(amanda_recover_t)`
trunk: Remove node definitions and change node usage to generic nodes. 2009-01-09 19:48:02 +00:00			`corenet_tcp_sendrecv_generic_node(amanda_recover_t)`
			`corenet_udp_sendrecv_generic_node(amanda_recover_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`corenet_tcp_sendrecv_all_ports(amanda_recover_t)`
			`corenet_udp_sendrecv_all_ports(amanda_recover_t)`
trunk: Remove node definitions and change node usage to generic nodes. 2009-01-09 19:48:02 +00:00			`corenet_tcp_bind_generic_node(amanda_recover_t)`
			`corenet_udp_bind_generic_node(amanda_recover_t)`
first part of dans patch Fri, 14 Apr 2006 08:08:43 -0400 2006-04-17 17:32:54 +00:00			`corenet_tcp_bind_reserved_port(amanda_recover_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`corenet_tcp_connect_amanda_port(amanda_recover_t)`
packets for admin modules 2006-05-29 19:53:43 +00:00			`corenet_sendrecv_amanda_client_packets(amanda_recover_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
another round of renaming 2006-02-20 21:33:25 +00:00			`domain_use_interactive_fds(amanda_recover_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`files_read_etc_files(amanda_recover_t)`
			`files_read_etc_runtime_files(amanda_recover_t)`
			`files_search_tmp(amanda_recover_t)`
			`files_search_pids(amanda_recover_t)`

trunk: 2 patches from dan. 2007-10-12 17:35:56 +00:00			`auth_use_nsswitch(amanda_recover_t)`

add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00			`fstools_domtrans(amanda_t)`
trunk: two small patches from dan. 2008-08-14 13:08:53 +00:00			`fstools_signal(amanda_t)`
add radius and amanda, which I forgot to ci 2005-10-22 22:51:01 +00:00
			`logging_search_logs(amanda_recover_t)`

			`miscfiles_read_localization(amanda_recover_t)`

trunk: merge UBAC. 2008-11-05 16:10:46 +00:00			`userdom_use_user_terminals(amanda_recover_t)`
			`userdom_search_user_home_content(amanda_recover_t)`