selinux-policy/strict/domains/program/unused/uptimed.te
2005-04-29 17:45:15 +00:00

37 lines
1.0 KiB
Plaintext

#DESC uptimed - a uptime daemon
#
# Author: Carsten Grohmann <carsten@securityenhancedlinux.de>
#
# Date: 19. June 2003
#
#################################
#
# General Types
#
type etc_uptimed_t, file_type, sysadmfile;
type uptimed_spool_t, file_type, sysadmfile;
#################################
#
# Rules for the uptimed_t domain.
#
daemon_domain(uptimed, `,privmail')
file_type_auto_trans(uptimed_t, var_spool_t, uptimed_spool_t)
allow uptimed_t { etc_uptimed_t proc_t }:file { getattr read };
read_locale(uptimed_t)
allow uptimed_t uptimed_spool_t:file create_file_perms;
allow uptimed_t self:unix_dgram_socket create_socket_perms;
# to send mail
can_exec(uptimed_t, shell_exec_t)
allow uptimed_t { bin_t sbin_t }:dir search;
allow uptimed_t bin_t:lnk_file read;
allow uptimed_t etc_runtime_t:file { getattr read };
allow uptimed_t self:fifo_file { getattr write };
# rules for uprecords - it runs in the user context
allow userdomain uptimed_spool_t:dir search;
allow userdomain uptimed_spool_t:file { getattr read };