rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Reset base

Browse Source
This commit is contained in:
Dan Walsh 2010-08-26 11:01:06 -04:00
parent e15d0e76e3
commit 09154bd53e
1 changed files with 21 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
policy/modules/admin/amanda.if
View File

@ -1,8 +1,9 @@
## <summary>Automated backup program.</summary> ## <summary>Advanced Maryland Automatic Network Disk Archiver.</summary>
######################################## ########################################
## <summary> ## <summary>
## Execute amrecover in the amanda_recover domain. ## Execute a domain transition to
## run Amanda Recover.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -16,12 +17,15 @@ interface(`amanda_domtrans_recover',`
') ')
domtrans_pattern($1, amanda_recover_exec_t, amanda_recover_t) domtrans_pattern($1, amanda_recover_exec_t, amanda_recover_t)
corecmd_search_bin($1)
') ')
######################################## ########################################
## <summary> ## <summary>
## Execute amrecover in the amanda_recover domain, and ## Execute a domain transition to
## allow the specified role the amanda_recover domain. ## run Amanda Recover and allow the
## specified role the Amanda Recover
## domain.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -46,7 +50,7 @@ interface(`amanda_run_recover',`
######################################## ########################################
## <summary> ## <summary>
## Search amanda library directories. ## Search Amanda lib directories.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -61,11 +65,13 @@ interface(`amanda_search_lib',`
allow $1 amanda_usr_lib_t:dir search_dir_perms; allow $1 amanda_usr_lib_t:dir search_dir_perms;
files_search_usr($1) files_search_usr($1)
libs_search_lib($1)
') ')
######################################## ########################################
## <summary> ## <summary>
## Do not audit attempts to read /etc/dumpdates. ## Do not audit attempts to read
## dumpdates files.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -78,12 +84,12 @@ interface(`amanda_dontaudit_read_dumpdates',`
type amanda_dumpdates_t; type amanda_dumpdates_t;
') ')
dontaudit $1 amanda_dumpdates_t:file { getattr read }; dontaudit $1 amanda_dumpdates_t:file read_file_perms;
') ')
######################################## ########################################
## <summary> ## <summary>
## Allow read/writing /etc/dumpdates. ## Read and write dumpdates files.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -97,11 +103,12 @@ interface(`amanda_rw_dumpdates_files',`
') ')
allow $1 amanda_dumpdates_t:file rw_file_perms; allow $1 amanda_dumpdates_t:file rw_file_perms;
files_search_etc($1)
') ')
######################################## ########################################
## <summary> ## <summary>
## Search amanda library directories. ## Search Amanda lib directories.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -116,11 +123,12 @@ interface(`amanda_manage_lib',`
allow $1 amanda_usr_lib_t:dir manage_dir_perms; allow $1 amanda_usr_lib_t:dir manage_dir_perms;
files_search_usr($1) files_search_usr($1)
libs_search_lib($1)
') ')
######################################## ########################################
## <summary> ## <summary>
## Allow read/writing amanda logs ## Read and write Amanda logs.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -134,11 +142,12 @@ interface(`amanda_append_log_files',`
') ')
allow $1 amanda_log_t:file { read_file_perms append_file_perms }; allow $1 amanda_log_t:file { read_file_perms append_file_perms };
logging_search_logs($1)
') ')
####################################### #######################################
## <summary> ## <summary>
## Search amanda var library directories. ## Search Amanda lib directories.
## </summary> ## </summary>
## <param name="domain"> ## <param name="domain">
## <summary> ## <summary>
@ -151,7 +160,6 @@ interface(`amanda_search_var_lib',`
type amanda_var_lib_t; type amanda_var_lib_t;
') ')
files_search_var_lib($1)
allow $1 amanda_var_lib_t:dir search_dir_perms; allow $1 amanda_var_lib_t:dir search_dir_perms;
files_search_var_lib($1)
') ')