## Tripwire file integrity checker. ## ##

## Tripwire file integrity checker. ##

##

## NOTE: Tripwire creates temp file in its current working directory. ## This policy does not allow write access to home directories, so ## users will need to either cd to a directory where they have write ## permission, or set the TEMPDIRECTORY variable in the tripwire config ## file. The latter is preferable, as then the file_type_auto_trans ## rules will kick in and label the files as private to tripwire. ##

##
######################################## ## ## Execute tripwire in the tripwire domain. ## ## ## ## Domain allowed access. ## ## # interface(`tripwire_domtrans_tripwire',` gen_require(` type tripwire_t, tripwire_exec_t; ') domtrans_pattern($1,tripwire_exec_t,tripwire_t) ') ######################################## ## ## Execute tripwire in the tripwire domain, and ## allow the specified role the tripwire domain. ## ## ## ## Domain allowed access. ## ## ## ## ## The role to be allowed the tripwire domain. ## ## ## ## ## The type of the terminal allow the tripwire domain to use. ## ## ## # interface(`tripwire_run_tripwire',` gen_require(` type tripwire_t; ') tripwire_domtrans_tripwire($1) role $2 types tripwire_t; allow tripwire_t $3:chr_file rw_term_perms; ') ######################################## ## ## Execute twadmin in the twadmin domain. ## ## ## ## Domain allowed access. ## ## # interface(`tripwire_domtrans_twadmin',` gen_require(` type twadmin_t, twadmin_exec_t; ') domtrans_pattern($1,twadmin_exec_t,twadmin_t) ') ######################################## ## ## Execute twadmin in the twadmin domain, and ## allow the specified role the twadmin domain. ## ## ## ## Domain allowed access. ## ## ## ## ## The role to be allowed the twadmin domain. ## ## ## ## ## The type of the terminal allow the twadmin domain to use. ## ## ## # interface(`tripwire_run_twadmin',` gen_require(` type twadmin_t; ') tripwire_domtrans_twadmin($1) role $2 types twadmin_t; allow twadmin_t $3:chr_file rw_term_perms; ') ######################################## ## ## Execute twprint in the twprint domain. ## ## ## ## Domain allowed access. ## ## # interface(`tripwire_domtrans_twprint',` gen_require(` type twprint_t, twprint_exec_t; ') domtrans_pattern($1,twprint_exec_t,twprint_t) ') ######################################## ## ## Execute twprint in the twprint domain, and ## allow the specified role the twprint domain. ## ## ## ## Domain allowed access. ## ## ## ## ## The role to be allowed the twprint domain. ## ## ## ## ## The type of the terminal allow the twprint domain to use. ## ## ## # interface(`tripwire_run_twprint',` gen_require(` type twprint_t; ') tripwire_domtrans_twprint($1) role $2 types twprint_t; allow twprint_t $3:chr_file rw_term_perms; ') ######################################## ## ## Execute siggen in the siggen domain. ## ## ## ## Domain allowed access. ## ## # interface(`tripwire_domtrans_siggen',` gen_require(` type siggen_t, siggen_exec_t; ') domtrans_pattern($1,siggen_exec_t,siggen_t) ') ######################################## ## ## Execute siggen in the siggen domain, and ## allow the specified role the siggen domain. ## ## ## ## Domain allowed access. ## ## ## ## ## The role to be allowed the siggen domain. ## ## ## ## ## The type of the terminal allow the siggen domain to use. ## ## ## # interface(`tripwire_run_siggen',` gen_require(` type siggen_t; ') tripwire_domtrans_siggen($1) role $2 types siggen_t; allow siggen_t $3:chr_file rw_term_perms; ')