46 lines
1.0 KiB
Plaintext
46 lines
1.0 KiB
Plaintext
#DESC Ircd - IRC server
|
|
#
|
|
# Author: Russell Coker <russell@coker.com.au>
|
|
# X-Debian-Packages: ircd dancer-ircd ircd-hybrid ircd-irc2 ircd-ircu
|
|
#
|
|
|
|
#################################
|
|
#
|
|
# Rules for the ircd_t domain.
|
|
#
|
|
# ircd_exec_t is the type of the slapd executable.
|
|
#
|
|
daemon_domain(ircd)
|
|
|
|
type ircd_port_t, port_type;
|
|
allow ircd_t ircd_port_t:tcp_socket name_bind;
|
|
|
|
etcdir_domain(ircd)
|
|
typealias ircd_etc_t alias etc_ircd_t;
|
|
|
|
logdir_domain(ircd)
|
|
|
|
var_lib_domain(ircd)
|
|
|
|
# Use the network.
|
|
can_network_server(ircd_t)
|
|
can_ypbind(ircd_t)
|
|
#allow ircd_t self:fifo_file { read write };
|
|
allow ircd_t self:unix_stream_socket create_socket_perms;
|
|
allow ircd_t self:unix_dgram_socket create_socket_perms;
|
|
|
|
allow ircd_t devtty_t:chr_file rw_file_perms;
|
|
|
|
allow ircd_t sbin_t:dir search;
|
|
|
|
allow ircd_t proc_t:file { getattr read };
|
|
|
|
# read config files
|
|
allow ircd_t { etc_t etc_runtime_t }:file { getattr read };
|
|
allow ircd_t etc_t:lnk_file read;
|
|
|
|
ifdef(`logrotate.te', `
|
|
allow logrotate_t ircd_var_run_t:dir search;
|
|
allow logrotate_t ircd_var_run_t:file { getattr read };
|
|
')
|