Attachment 149271 Details for Bug 231021 – amtu SELinux policy

amtu SELinux policy

amtu-policy.txt (text/plain), 1.51 KB, created by Loulwa Salem on 2007-03-05 17:24:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Loulwa Salem

Created: 2007-03-05 17:24:38 UTC

Size: 1.51 KB

patch

obsolete

>policy_module(amtu,1.0.23)
>
>########################################
>#
># Declarations
>#
>gen_require(` 
>	type sysadm_t;
>	role sysadm_r; 
>	type sysadm_devpts_t;
>	type boot_t;
>	type etc_runtime_t;
>	type proc_t;
>')
>
>type amtu_t;
>type amtu_exec_t;
>domain_type(amtu_t)
>domain_entry_file(amtu_t, amtu_exec_t)
>role sysadm_r types amtu_t;
>domain_auto_trans(sysadm_t, amtu_exec_t, amtu_t)
>
>########################################
>#
># amtu local policy
>#
>
># Some common macros used by amtu
>files_read_etc_files(amtu_t)
>libs_use_ld_so(amtu_t)
>libs_use_shared_libs(amtu_t)
>
># Specific allow rules required for amtu
>allow amtu_t self:capability { audit_write net_raw };
>allow amtu_t self:netlink_audit_socket { create nlmsg_relay read write };
>allow amtu_t self:packet_socket { bind create read write };
>allow amtu_t self:udp_socket { create ioctl };
>allow amtu_t sysadm_devpts_t:chr_file { read write getattr ioctl };
>allow amtu_t boot_t:dir { add_name getattr read remove_name search write };
>allow amtu_t boot_t:file { create getattr read unlink write };
>allow amtu_t etc_runtime_t:file { getattr read };
>allow amtu_t proc_t:file { getattr read };
>
>optional_policy(`
>	seutil_use_newrole_fds(amtu_t)
>');
>
>optional_policy(`
>	userdom_use_sysadm_fds(amtu_t)
>');
>
>optional_policy(`
>	userdom_sigchld_sysadm(amtu_t)
>');
>
>optional_policy(`
>	nscd_dontaudit_search_pid(amtu_t)
>');
>
>optional_policy(`
>	kernel_dontaudit_read_system_state(amtu_t)
>');
>
>optional_policy(`
>	term_dontaudit_search_ptys(amtu_t)
>');

Actions: View

Attachments on bug 231021: 149270 | 149271