Attachment 159157 Details for Bug 243949 – generated output

generated output

myopenvpn.te (text/plain), 1.56 KB, created by Christoph Höger on 2007-07-13 11:57:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Christoph Höger

Created: 2007-07-13 11:57:36 UTC

Size: 1.56 KB

patch

obsolete

>
>module myopenvpn 1.0;
>
>require {
>	type system_dbusd_var_run_t;
>	type fs_t;
>	type lo_node_t;
>	type tun_tap_device_t;
>	type openvpn_exec_t;
>	type system_dbusd_t;
>	type openvpn_t;
>	type openvpn_port_t;
>	type prelink_t;
>	type NetworkManager_t;
>	class process { signal getsched };
>	class unix_stream_socket connectto;
>	class dbus send_msg;
>	class chr_file { read write ioctl };
>	class capability { dac_read_search dac_override };
>	class tcp_socket { name_bind node_bind };
>	class file { rename execute read execute_no_trans getattr relabelto unlink };
>	class filesystem associate;
>	class sock_file write;
>	class dir search;
>}
>
>#============= NetworkManager_t ==============
>allow NetworkManager_t fs_t:filesystem associate;
>allow NetworkManager_t lo_node_t:tcp_socket node_bind;
>allow NetworkManager_t openvpn_exec_t:file { read execute execute_no_trans };
>allow NetworkManager_t openvpn_port_t:tcp_socket name_bind;
>allow NetworkManager_t self:file { execute execute_no_trans };
>allow NetworkManager_t tun_tap_device_t:chr_file { read write ioctl };
>
>#============= openvpn_t ==============
>allow openvpn_t NetworkManager_t:dbus send_msg;
>allow openvpn_t self:capability { dac_read_search dac_override };
>allow openvpn_t self:process { signal getsched };
>allow openvpn_t system_dbusd_t:dbus send_msg;
>allow openvpn_t system_dbusd_t:unix_stream_socket connectto;
>allow openvpn_t system_dbusd_var_run_t:dir search;
>allow openvpn_t system_dbusd_var_run_t:sock_file write;
>
>#============= prelink_t ==============
>allow prelink_t NetworkManager_t:file { rename execute read relabelto unlink getattr };

Actions: View

Attachments on bug 243949: 159156 | 159157 | 159158