## <summary> ## Daemon that interfaces mail transfer agents and content ## checkers, such as virus scanners. ## </summary> ######################################## ## <summary> ## Execute a domain transition to run amavis. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`amavis_domtrans',` gen_require(` type amavis_t, amavis_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, amavis_exec_t, amavis_t) ') ######################################## ## <summary> ## Execute amavis server in the amavis domain. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed to transition. ## </summary> ## </param> # interface(`amavis_initrc_domtrans',` gen_require(` type amavis_initrc_exec_t; ') init_labeled_script_domtrans($1, amavis_initrc_exec_t) ') ######################################## ## <summary> ## Read amavis spool files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`amavis_read_spool_files',` gen_require(` type amavis_spool_t; ') files_search_spool($1) read_files_pattern($1, amavis_spool_t, amavis_spool_t) ') ######################################## ## <summary> ## Manage amavis spool files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`amavis_manage_spool_files',` gen_require(` type amavis_spool_t; ') files_search_spool($1) manage_dirs_pattern($1, amavis_spool_t, amavis_spool_t) manage_files_pattern($1, amavis_spool_t, amavis_spool_t) ') ######################################## ## <summary> ## Create objects in the amavis spool directories ## with a private type. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <param name="private_type"> ## <summary> ## Private file type. ## </summary> ## </param> ## <param name="object_class"> ## <summary> ## Class of the object being created. ## </summary> ## </param> # interface(`amavis_spool_filetrans',` gen_require(` type amavis_spool_t; ') files_search_spool($1) filetrans_pattern($1, amavis_spool_t, $2, $3) ') ######################################## ## <summary> ## Search amavis lib directories. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`amavis_search_lib',` gen_require(` type amavis_var_lib_t; ') allow $1 amavis_var_lib_t:dir search_dir_perms; files_search_var_lib($1) ') ######################################## ## <summary> ## Read amavis lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`amavis_read_lib_files',` gen_require(` type amavis_var_lib_t; ') read_files_pattern($1, amavis_var_lib_t, amavis_var_lib_t) allow $1 amavis_var_lib_t:dir list_dir_perms; files_search_var_lib($1) ') ######################################## ## <summary> ## Create, read, write, and delete ## amavis lib files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`amavis_manage_lib_files',` gen_require(` type amavis_var_lib_t; ') manage_files_pattern($1, amavis_var_lib_t, amavis_var_lib_t) files_search_var_lib($1) ') ######################################## ## <summary> ## Set the attributes of amavis pid files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`amavis_setattr_pid_files',` gen_require(` type amavis_var_run_t; ') allow $1 amavis_var_run_t:file setattr; files_search_pids($1) ') ######################################## ## <summary> ## Create of amavis pid files. ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> # interface(`amavis_create_pid_files',` gen_require(` type amavis_var_run_t; ') allow $1 amavis_var_run_t:file create_file_perms; files_search_pids($1) ') ######################################## ## <summary> ## All of the rules required to administrate ## an amavis environment ## </summary> ## <param name="domain"> ## <summary> ## Domain allowed access. ## </summary> ## </param> ## <param name="role"> ## <summary> ## Role allowed access. ## </summary> ## </param> ## <rolecap/> # interface(`amavis_admin',` gen_require(` type amavis_t, amavis_tmp_t, amavis_var_log_t; type amavis_spool_t, amavis_var_lib_t, amavis_var_run_t; type amavis_etc_t, amavis_quarantine_t; type amavis_initrc_exec_t; ') allow $1 amavis_t:process { ptrace signal_perms }; ps_process_pattern($1, amavis_t) amavis_initrc_domtrans($1) domain_system_change_exemption($1) role_transition $2 amavis_initrc_exec_t system_r; allow $2 system_r; files_list_etc($1) admin_pattern($1, amavis_etc_t) admin_pattern($1, amavis_quarantine_t) files_list_spool($1) admin_pattern($1, amavis_spool_t) files_list_tmp($1) admin_pattern($1, amavis_tmp_t) files_list_var_lib($1) admin_pattern($1, amavis_var_lib_t) logging_list_logs($1) admin_pattern($1, amavis_var_log_t) files_list_pids($1) admin_pattern($1, amavis_var_run_t) ')