1976ddda24
Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes. Whitespace, newline and tab fixes.
134 lines
2.7 KiB
Plaintext
134 lines
2.7 KiB
Plaintext
## <summary>Bring up/down ethernet interfaces based on cable detection.</summary>
|
|
|
|
########################################
|
|
## <summary>
|
|
## Execute a domain transition to run ifplugd.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed to transition.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`ifplugd_domtrans',`
|
|
gen_require(`
|
|
type ifplugd_t, ifplugd_exec_t;
|
|
')
|
|
|
|
domtrans_pattern($1, ifplugd_exec_t, ifplugd_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Send a generic signal to ifplugd
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`ifplugd_signal',`
|
|
gen_require(`
|
|
type ifplugd_t;
|
|
')
|
|
|
|
allow $1 ifplugd_t:process signal;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read ifplugd etc configuration files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`ifplugd_read_config',`
|
|
gen_require(`
|
|
type ifplugd_etc_t;
|
|
')
|
|
|
|
files_search_etc($1)
|
|
read_files_pattern($1, ifplugd_etc_t, ifplugd_etc_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Manage ifplugd etc configuration files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`ifplugd_manage_config',`
|
|
gen_require(`
|
|
type ifplugd_etc_t;
|
|
')
|
|
|
|
files_search_etc($1)
|
|
manage_dirs_pattern($1, ifplugd_etc_t, ifplugd_etc_t)
|
|
manage_files_pattern($1, ifplugd_etc_t, ifplugd_etc_t)
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## Read ifplugd PID files.
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
#
|
|
interface(`ifplugd_read_pid_files',`
|
|
gen_require(`
|
|
type ifplugd_var_run_t;
|
|
')
|
|
|
|
files_search_pids($1)
|
|
allow $1 ifplugd_var_run_t:file read_file_perms;
|
|
')
|
|
|
|
########################################
|
|
## <summary>
|
|
## All of the rules required to administrate
|
|
## an ifplugd environment
|
|
## </summary>
|
|
## <param name="domain">
|
|
## <summary>
|
|
## Domain allowed access.
|
|
## </summary>
|
|
## </param>
|
|
## <param name="role">
|
|
## <summary>
|
|
## The role to be allowed to manage the ifplugd domain.
|
|
## </summary>
|
|
## </param>
|
|
## <rolecap/>
|
|
#
|
|
interface(`ifplugd_admin',`
|
|
gen_require(`
|
|
type ifplugd_t, ifplugd_etc_t;
|
|
type ifplugd_var_run_t, ifplugd_initrc_exec_t;
|
|
')
|
|
|
|
allow $1 ifplugd_t:process { ptrace signal_perms };
|
|
ps_process_pattern($1, ifplugd_t)
|
|
|
|
init_labeled_script_domtrans($1, ifplugd_initrc_exec_t)
|
|
domain_system_change_exemption($1)
|
|
role_transition $2 ifplugd_initrc_exec_t system_r;
|
|
allow $2 system_r;
|
|
|
|
files_list_etc($1)
|
|
admin_pattern($1, ifplugd_etc_t)
|
|
|
|
files_list_pids($1)
|
|
admin_pattern($1, ifplugd_var_run_t)
|
|
')
|