certmaster patch from Dan Walsh

This commit is contained in:
Jeremy Solt 2010-08-30 10:27:12 -04:00 committed by Chris PeBenito
parent dc1db5407a
commit e9bf16d2d9

View File

@ -18,6 +18,25 @@ interface(`certmaster_domtrans',`
domtrans_pattern($1, certmaster_exec_t, certmaster_t)
')
####################################
## <summary>
## Execute certmaster in the caller domain.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed access.
## </summary>
## </param>
#
interface(`certmaster_exec',`
gen_require(`
type certmaster_exec_t;
')
can_exec($1, certmaster_exec_t)
corecmd_search_bin($1)
')
#######################################
## <summary>
## read certmaster logs.
@ -79,7 +98,7 @@ interface(`certmaster_manage_log',`
########################################
## <summary>
## All of the rules required to administrate
## All of the rules required to administrate
## an snort environment
## </summary>
## <param name="domain">