rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

add connect interface on ports to handle name_connect tcp perm

Browse Source
This commit is contained in:
Chris PeBenito 2005-07-22 15:38:01 +00:00
parent 50527cf581
commit 022f61c0e3
1 changed files with 62 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

106
refpolicy/policy/modules/kernel/corenetwork.if.m4
View File

@ -6,9 +6,9 @@
define(`create_netif_interfaces',`` define(`create_netif_interfaces',``
######################################## ########################################
## <desc> ## <summary>
## Send and receive TCP network traffic on the $1 interface. ## Send and receive TCP network traffic on the $1 interface.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -24,9 +24,9 @@ interface(`corenet_tcp_sendrecv_$1',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send UDP network traffic on the $1 interface. ## Send UDP network traffic on the $1 interface.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -42,9 +42,9 @@ interface(`corenet_udp_send_$1',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Receive UDP network traffic on the $1 interface. ## Receive UDP network traffic on the $1 interface.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -60,9 +60,9 @@ interface(`corenet_udp_receive_$1',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send and receive UDP network traffic on the $1 interface. ## Send and receive UDP network traffic on the $1 interface.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -74,9 +74,9 @@ interface(`corenet_udp_sendrecv_$1',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send raw IP packets on the $1 interface. ## Send raw IP packets on the $1 interface.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -94,9 +94,9 @@ interface(`corenet_raw_send_$1',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Receive raw IP packets on the $1 interface. ## Receive raw IP packets on the $1 interface.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -112,9 +112,9 @@ interface(`corenet_raw_receive_$1',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send and receive raw IP packets on the $1 interface. ## Send and receive raw IP packets on the $1 interface.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -134,9 +134,9 @@ interface(`corenet_raw_sendrecv_$1',`
define(`create_node_interfaces',`` define(`create_node_interfaces',``
######################################## ########################################
## <desc> ## <summary>
## Send and receive TCP traffic on the $1 node. ## Send and receive TCP traffic on the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -152,9 +152,9 @@ interface(`corenet_tcp_sendrecv_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send UDP traffic on the $1 node. ## Send UDP traffic on the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -170,9 +170,9 @@ interface(`corenet_udp_send_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Receive UDP traffic on the $1 node. ## Receive UDP traffic on the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -188,9 +188,9 @@ interface(`corenet_udp_receive_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send and receive UDP traffic on the $1 node. ## Send and receive UDP traffic on the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -202,9 +202,9 @@ interface(`corenet_udp_sendrecv_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send raw IP packets on the $1 node. ## Send raw IP packets on the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -220,9 +220,9 @@ interface(`corenet_raw_send_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Receive raw IP packets on the $1 node. ## Receive raw IP packets on the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -238,9 +238,9 @@ interface(`corenet_raw_receive_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send and receive raw IP packets on the $1 node. ## Send and receive raw IP packets on the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -252,9 +252,9 @@ interface(`corenet_raw_sendrecv_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Bind TCP sockets to node $1. ## Bind TCP sockets to node $1.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -270,9 +270,9 @@ interface(`corenet_tcp_bind_$1_node',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Bind UDP sockets to the $1 node. ## Bind UDP sockets to the $1 node.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -296,9 +296,9 @@ interface(`corenet_udp_bind_$1_node',`
define(`create_port_interfaces',`` define(`create_port_interfaces',``
######################################## ########################################
## <desc> ## <summary>
## Send and receive TCP traffic on the $1 port. ## Send and receive TCP traffic on the $1 port.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -314,9 +314,9 @@ interface(`corenet_tcp_sendrecv_$1_port',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send UDP traffic on the $1 port. ## Send UDP traffic on the $1 port.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -332,9 +332,9 @@ interface(`corenet_udp_send_$1_port',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Receive UDP traffic on the $1 port. ## Receive UDP traffic on the $1 port.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -350,9 +350,9 @@ interface(`corenet_udp_receive_$1_port',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Send and receive UDP traffic on the $1 port. ## Send and receive UDP traffic on the $1 port.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -364,9 +364,9 @@ interface(`corenet_udp_sendrecv_$1_port',`
') ')
######################################## ########################################
## <desc> ## <summary>
## Bind TCP sockets to the $1 port. ## Bind TCP sockets to the $1 port.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -378,14 +378,15 @@ interface(`corenet_tcp_bind_$1_port',`
class tcp_socket name_bind; class tcp_socket name_bind;
$3 $3
') ')
allow dollarsone $1_port_t:tcp_socket name_bind; allow dollarsone $1_port_t:tcp_socket name_bind;
$2 $2
') ')
######################################## ########################################
## <desc> ## <summary>
## Bind UDP sockets to the $1 port. ## Bind UDP sockets to the $1 port.
## </desc> ## </summary>
## <param name="domain"> ## <param name="domain">
## The type of the process performing this action. ## The type of the process performing this action.
## </param> ## </param>
@ -401,6 +402,23 @@ interface(`corenet_udp_bind_$1_port',`
allow dollarsone $1_port_t:udp_socket name_bind; allow dollarsone $1_port_t:udp_socket name_bind;
$2 $2
') ')
########################################
## <summary>
## Make a TCP connection to the $1 port.
## </summary>
## <param name="domain">
## The type of the process performing this action.
## </param>
#
interface(`corenet_tcp_connect_$1_port',`
gen_require(`
type $1_port_t;
class tcp_socket name_connect;
')
allow dollarsone $1_port_t:tcp_socket name_connect;
')
'') dnl end create_port_interfaces '') dnl end create_port_interfaces
# #