selinux-policy/policy/modules/system/netlabel.te
2006-10-17 16:58:17 +00:00

29 lines
628 B
Plaintext

policy_module(netlabel,1.0.0)
########################################
#
# Declarations
#
type netlabel_mgmt_t;
type netlabel_mgmt_exec_t;
domain_type(netlabel_mgmt_t)
domain_entry_file(netlabel_mgmt_t,netlabel_mgmt_exec_t)
########################################
#
# NetLabel Management Tools Local policy
#
# modify the network subsystem configuration
allow netlabel_mgmt_t self:capability net_admin;
allow netlabel_mgmt_t self:netlink_socket create_socket_perms;
kernel_read_network_state(netlabel_mgmt_t)
libs_use_ld_so(netlabel_mgmt_t)
libs_use_shared_libs(netlabel_mgmt_t)
seutil_use_newrole_fds(netlabel_mgmt_t)