## <summary>Ricci cluster management agent</summary> ######################################## ## <summary> ## Execute a domain transition to run ricci. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`ricci_domtrans',` gen_require(` type ricci_t, ricci_exec_t; ') domtrans_pattern($1, ricci_exec_t, ricci_t) ') ######################################## ## <summary> ## Execute a domain transition to run ricci_modcluster. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`ricci_domtrans_modcluster',` gen_require(` type ricci_modcluster_t, ricci_modcluster_exec_t; ') domtrans_pattern($1, ricci_modcluster_exec_t, ricci_modcluster_t) ') ######################################## ## <summary> ## Do not audit attempts to use ## ricci_modcluster file descriptors. ## </summary> ## <param name="domain"> ## <summary> ## The type of process not to audit. ## </summary> ## </param> # interface(`ricci_dontaudit_use_modcluster_fds',` gen_require(` type ricci_modcluster_t; ') dontaudit $1 ricci_modcluster_t:fd use; ') ######################################## ## <summary> ## Do not audit attempts to read write ## ricci_modcluster unamed pipes. ## </summary> ## <param name="domain"> ## <summary> ## The type of process not to audit. ## </summary> ## </param> # interface(`ricci_dontaudit_rw_modcluster_pipes',` gen_require(` type ricci_modcluster_t; ') dontaudit $1 ricci_modcluster_t:fifo_file { read write }; ') ######################################## ## <summary> ## Connect to ricci_modclusterd over an unix stream socket. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`ricci_stream_connect_modclusterd',` gen_require(` type ricci_modclusterd_t, ricci_modcluster_var_run_t; ') files_search_pids($1) allow $1 ricci_modcluster_var_run_t:sock_file write; allow $1 ricci_modclusterd_t:unix_stream_socket connectto; ') ######################################## ## <summary> ## Execute a domain transition to run ricci_modlog. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`ricci_domtrans_modlog',` gen_require(` type ricci_modlog_t, ricci_modlog_exec_t; ') domtrans_pattern($1, ricci_modlog_exec_t, ricci_modlog_t) ') ######################################## ## <summary> ## Execute a domain transition to run ricci_modrpm. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`ricci_domtrans_modrpm',` gen_require(` type ricci_modrpm_t, ricci_modrpm_exec_t; ') domtrans_pattern($1, ricci_modrpm_exec_t, ricci_modrpm_t) ') ######################################## ## <summary> ## Execute a domain transition to run ricci_modservice. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`ricci_domtrans_modservice',` gen_require(` type ricci_modservice_t, ricci_modservice_exec_t; ') domtrans_pattern($1, ricci_modservice_exec_t, ricci_modservice_t) ') ######################################## ## <summary> ## Execute a domain transition to run ricci_modstorage. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`ricci_domtrans_modstorage',` gen_require(` type ricci_modstorage_t, ricci_modstorage_exec_t; ') domtrans_pattern($1, ricci_modstorage_exec_t, ricci_modstorage_t) ')