Attachment 304468 Details for Bug 445101 – generated SELinux module

generated SELinux module

staffu01.te (text/plain), 1.85 KB, created by Matěj Cepl on 2008-05-03 22:17:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matěj Cepl

Created: 2008-05-03 22:17:23 UTC

Size: 1.85 KB

patch

obsolete

>
>module staffu01 1.0;
>
>require {
>	type staff_t;
>	type unconfined_tmpfs_t;
>	type gpg_t;
>	type root_t;
>	type usr_t;
>	type pulseaudio_port_t;
>	type evolution_alarm_exec_t;
>	type user_home_t;
>	type port_t;
>	type iscsid_t;
>	type avahi_t;
>	type bitlbee_port_t;
>	type soundd_port_t;
>	type evolution_server_exec_t;
>	type xdm_var_run_t;
>	type evolution_exec_t;
>	type etc_t;
>	class process signal;
>	class dbus send_msg;
>	class capability { setuid dac_override };
>	class tcp_socket name_bind;
>	class file { rename setattr read create write link unlink };
>	class sock_file execute;
>	class lnk_file read;
>	class dir { write rmdir remove_name add_name };
>}
>
>#============= avahi_t ==============
>allow avahi_t staff_t:dbus send_msg;
>
>#============= gpg_t ==============
>allow gpg_t user_home_t:lnk_file read;
>
>#============= iscsid_t ==============
>allow iscsid_t self:process signal;
>
>#============= staff_t ==============
>allow staff_t avahi_t:dbus send_msg;
>allow staff_t bitlbee_port_t:tcp_socket name_bind;
>allow staff_t etc_t:dir { write remove_name add_name };
>allow staff_t etc_t:file { write rename create unlink setattr };
>allow staff_t evolution_alarm_exec_t:file read;
>allow staff_t evolution_exec_t:file read;
>allow staff_t evolution_server_exec_t:file read;
>allow staff_t port_t:tcp_socket name_bind;
>allow staff_t pulseaudio_port_t:tcp_socket name_bind;
>allow staff_t root_t:dir { write remove_name add_name };
>allow staff_t root_t:file { write create unlink };
>allow staff_t self:capability { setuid dac_override };
>allow staff_t soundd_port_t:tcp_socket name_bind;
>allow staff_t unconfined_tmpfs_t:file { read unlink };
>allow staff_t user_home_t:sock_file execute;
>allow staff_t usr_t:dir { write remove_name rmdir };
>allow staff_t usr_t:file { write unlink };
>allow staff_t xdm_var_run_t:dir { write remove_name add_name };
>allow staff_t xdm_var_run_t:file { write create unlink link };

Actions: View

Attachments on bug 445101: 304465 | 304468