29 lines
676 B
Plaintext
29 lines
676 B
Plaintext
# Copyright (C) 2005 Tresys Technology, LLC
|
|
|
|
policy_module(domain,1.0)
|
|
|
|
# Mark process types as domains
|
|
attribute domain;
|
|
|
|
# entrypoint executables
|
|
attribute entry_type;
|
|
|
|
# processes started by init itself
|
|
attribute init_domain;
|
|
attribute init_domain_entry;
|
|
|
|
# short running processes started by init scripts,
|
|
# such as mount, usually for initializing the system
|
|
attribute system_domain;
|
|
attribute system_domain_entry;
|
|
|
|
# long running application processes started by
|
|
# init scripts, such as sshd
|
|
attribute daemon_domain;
|
|
attribute daemon_domain_entry;
|
|
|
|
# widely-inheritable file descriptors
|
|
attribute privfd;
|
|
|
|
neverallow domain ~domain:process { transition dyntransition };
|