## Simple network management protocol services ######################################## ## ## Use snmp over a TCP connection. (Deprecated) ## ## ## ## Domain allowed access. ## ## # interface(`snmp_tcp_connect',` refpolicywarn(`$0($*) has been deprecated.') ') ######################################## ## ## Send and receive UDP traffic to SNMP (Deprecated) ## ## ## ## Domain allowed access. ## ## # interface(`snmp_udp_chat',` refpolicywarn(`$0($*) has been deprecated.') ') ######################################## ## ## Read snmpd libraries. ## ## ## ## Domain allowed access. ## ## # interface(`snmp_read_snmp_var_lib_files',` gen_require(` type snmpd_var_lib_t; ') allow $1 snmpd_var_lib_t:dir list_dir_perms; read_files_pattern($1,snmpd_var_lib_t,snmpd_var_lib_t) read_lnk_files_pattern($1,snmpd_var_lib_t,snmpd_var_lib_t) ') ######################################## ## ## dontaudit Read snmpd libraries. ## ## ## ## Domain to not audit. ## ## # interface(`snmp_dontaudit_read_snmp_var_lib_files',` gen_require(` type snmpd_var_lib_t; ') dontaudit $1 snmpd_var_lib_t:dir list_dir_perms; dontaudit $1 snmpd_var_lib_t:file read_file_perms; dontaudit $1 snmpd_var_lib_t:lnk_file { getattr read }; ') ######################################## ## ## dontaudit write snmpd libraries files. ## ## ## ## Domain to not audit. ## ## # interface(`snmp_dontaudit_write_snmp_var_lib_files',` gen_require(` type snmpd_var_lib_t; ') dontaudit $1 snmpd_var_lib_t:file write; ')