#DESC MonopD - Monopoly Daemon
#
# Author: Torsten Knodt <tk-selinux@datas-world.de>
# based on the dhcpd_t policy from:
#          Russell Coker <russell@coker.com.au>
#

#################################
#
# Rules for the monopd_t domain.
#
daemon_domain(monopd)

type etc_monopd_t, file_type, sysadmfile;
type share_monopd_t, file_type, sysadmfile;

# Use the network.
can_network_server(monopd_t)
can_ypbind(monopd_t)

type monopd_port_t, port_type;
allow monopd_t monopd_port_t:tcp_socket name_bind;

r_dir_file(monopd_t,etc_monopd_t)
r_dir_file(monopd_t,share_monopd_t)

allow monopd_t self:unix_dgram_socket create_socket_perms;
allow monopd_t self:unix_stream_socket create_socket_perms;

r_dir_file(monopd_t, etc_t)