8f0b7460ea
Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Replace type and attributes statements by comma delimiters where possible. Syntax error. Squash me with 959aa527a5394d23b994ecf75347d2445106d0c4 Replace type and attributes statements by comma delimiters where possible. Syntax error. Squach me with 779a708452142d6e4ac2ba2a158f724782a03291 Replace type and attributes statements by comma delimiters where possible. Syntax error. Squash me with 89180ea115794aadddaa9b356ab1dfcdc9ff102
122 lines
2.7 KiB
Plaintext
122 lines
2.7 KiB
Plaintext
## <summary>Reserve well-known ports in the RPC port range.</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run portreserve.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`portreserve_domtrans',`
|
|
gen_require(`
|
|
type portreserve_t, portreserve_exec_t;
|
|
')
|
|
|
|
domtrans_pattern($1, portreserve_exec_t, portreserve_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute portreserve in the portreserve domain.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`portreserve_initrc_domtrans', `
|
|
gen_require(`
|
|
type portreserve_initrc_exec_t;
|
|
')
|
|
|
|
init_labeled_script_domtrans($1, portreserve_initrc_exec_t)
|
|
')
|
|
|
|
#######################################
|
|
## <summary>
|
|
## Allow the specified domain to read
|
|
## portreserve etcuration files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
##
|
|
#
|
|
interface(`portreserve_read_config',`
|
|
gen_require(`
|
|
type portreserve_etc_t;
|
|
')
|
|
|
|
files_search_etc($1)
|
|
allow $1 portreserve_etc_t:dir list_dir_perms;
|
|
read_files_pattern($1, portreserve_etc_t, portreserve_etc_t)
|
|
read_lnk_files_pattern($1, portreserve_etc_t, portreserve_etc_t)
|
|
')
|
|
|
|
#######################################
|
|
## <summary>
|
|
## Allow the specified domain to manage
|
|
## portreserve etcuration files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
##
|
|
#
|
|
interface(`portreserve_manage_config',`
|
|
gen_require(`
|
|
type portreserve_etc_t;
|
|
')
|
|
|
|
files_search_etc($1)
|
|
manage_dirs_pattern($1, portreserve_etc_t, portreserve_etc_t)
|
|
manage_files_pattern($1, portreserve_etc_t, portreserve_etc_t)
|
|
read_lnk_files_pattern($1, portreserve_etc_t, portreserve_etc_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to administrate
|
|
## an portreserve environment.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## Role allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`portreserve_admin', `
|
|
gen_require(`
|
|
type portreserve_t, portreserve_etc_t, portreserve_var_run_t;
|
|
type portreserve_initrc_exec_t;
|
|
')
|
|
|
|
allow $1 portreserve_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, portreserve_t)
|
|
|
|
portreserve_initrc_domtrans($1)
|
|
domain_system_change_exemption($1)
|
|
role_transition $2 portreserve_initrc_exec_t system_r;
|
|
allow $2 system_r;
|
|
|
|
files_search_etc($1)
|
|
admin_pattern($1, portreserve_etc_t)
|
|
|
|
files_search_pids($1)
|
|
admin_pattern($1, portreserve_var_run_t)
|
|
')
|