rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

cleanup

Browse Source
This commit is contained in:
Chris PeBenito 2005-08-17 17:31:57 +00:00
parent 545b0c9176
commit 23ca91f8bb
3 changed files with 29 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
refpolicy/policy/modules/services/inetd.if
View File

@ -111,6 +111,23 @@ interface(`inetd_service_domain',`
allow $1 inetd_t:udp_socket rw_socket_perms; allow $1 inetd_t:udp_socket rw_socket_perms;
') ')
########################################
## <summary>
## Inherit and use file descriptors from inetd.
## </summary>
## <param name="domain">
## Domain allowed access.
## </param>
#
interface(`inetd_use_fd',`
gen_require(`
type inetd_t;
class fd use;
')
allow $1 inetd_t:fd use;
')
######################################## ########################################
## <summary> ## <summary>
## Connect to the inetd service using a TCP connection. ## Connect to the inetd service using a TCP connection.

14
refpolicy/policy/modules/system/userdomain.if
View File

@ -366,11 +366,11 @@ template(`base_user_template',`
ifdef(`inetd.te', ` ifdef(`inetd.te', `
# Connect to inetd. # Connect to inetd.
can_tcp_connect($1_t, inetd_t) inetd_tcp_connect($1_t)
can_udp_send($1_t, inetd_t) can_udp_send($1_t, inetd_t)
can_udp_send(inetd_t, $1_t) can_udp_send(inetd_t, $1_t)
# Inherit and use sockets from inetd # Inherit and use sockets from inetd
allow $1_t inetd_t:fd use; inetd_use_fd($1_t)
allow $1_t inetd_t:tcp_socket rw_stream_socket_perms; allow $1_t inetd_t:tcp_socket rw_stream_socket_perms;
') ')
@ -453,12 +453,10 @@ template(`unpriv_user_template', `
typeattribute $1_t unpriv_userdomain; #, web_client_domain typeattribute $1_t unpriv_userdomain; #, web_client_domain
domain_wide_inherit_fd($1_t) domain_wide_inherit_fd($1_t)
#typeattribute $1_devpts_t userpty_type, user_tty_type; typeattribute $1_devpts_t user_ptynode;
#typeattribute $1_home_dir_t user_home_dir_type; typeattribute $1_home_dir_t user_home_dir_type;
#typeattribute $1_home_t user_home_type; typeattribute $1_home_t user_home_type;
typeattribute $1_tmp_t user_tmpfile; typeattribute $1_tmp_t user_tmpfile;
typeattribute $1_tty_device_t user_ttynode; typeattribute $1_tty_device_t user_ttynode;
############################## ##############################
@ -813,8 +811,6 @@ template(`admin_user_template',`
# for lsof # for lsof
allow $1_t mtrr_device_t:file getattr; allow $1_t mtrr_device_t:file getattr;
# for lsof
allow $1_t eventpollfs_t:file getattr; allow $1_t eventpollfs_t:file getattr;
allow $1_t serial_device:chr_file setattr; allow $1_t serial_device:chr_file setattr;

7
refpolicy/policy/modules/system/userdomain.te
View File

@ -20,6 +20,13 @@ attribute home_type;
# a user in writing regular files) # a user in writing regular files)
attribute privhome; attribute privhome;
# all unprivileged users home directories
attribute user_home_dir_type;
attribute user_home_type;
# all unprivileged users ptys
attribute user_ptynode;
# all unprivileged users tmp files # all unprivileged users tmp files
attribute user_tmpfile; attribute user_tmpfile;