selinux-policy/policy/modules/services/razor.te

63 lines
1.4 KiB
Plaintext

policy_module(razor, 1.4.0)
########################################
#
# Declarations
#
type razor_t;
type razor_exec_t;
domain_type(razor_t)
domain_entry_file(razor_t, razor_exec_t)
role system_r types razor_t;
type razor_etc_t;
files_config_file(razor_etc_t)
type razor_log_t;
logging_log_file(razor_log_t)
type razor_var_lib_t;
files_type(razor_var_lib_t)
razor_common_domain_template(razor)
########################################
#
# Local policy
#
allow razor_t self:tcp_socket create_socket_perms;
manage_dirs_pattern(razor_t, razor_etc_t, razor_etc_t)
manage_files_pattern(razor_t, razor_etc_t, razor_etc_t)
manage_lnk_files_pattern(razor_t, razor_etc_t, razor_etc_t)
files_search_etc(razor_t)
allow razor_t razor_log_t:file manage_file_perms;
logging_log_filetrans(razor_t, razor_log_t, file)
manage_files_pattern(razor_t, razor_var_lib_t, razor_var_lib_t)
files_var_lib_filetrans(razor_t, razor_var_lib_t, file)
corenet_all_recvfrom_unlabeled(razor_t)
corenet_all_recvfrom_netlabel(razor_t)
corenet_tcp_sendrecv_generic_if(razor_t)
corenet_raw_sendrecv_generic_if(razor_t)
corenet_tcp_sendrecv_all_nodes(razor_t)
corenet_raw_sendrecv_all_nodes(razor_t)
corenet_tcp_sendrecv_razor_port(razor_t)
corenet_tcp_connect_razor_port(razor_t)
corenet_sendrecv_razor_client_packets(razor_t)
sysnet_read_config(razor_t)
optional_policy(`
logging_send_syslog_msg(razor_t)
')
optional_policy(`
nscd_socket_use(razor_t)
')