Attachment 311084 Details for Bug 454167 – ids.te module

ids.te module

ids.te (text/plain), 1.96 KB, created by Luke Macken on 2008-07-05 21:33:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Luke Macken

Created: 2008-07-05 21:33:30 UTC

Size: 1.96 KB

patch

obsolete

>
>module ids 1.0;
>
>require {
>	type unlabeled_t;
>	type net_conf_t;
>	type httpd_prewikka_script_t;
>	type syslogd_t;
>	type user_home_t;
>	type audisp_t;
>	type inaddr_any_node_t;
>	type devlog_t;
>	type prelude_audisp_t;
>	type httpd_t;
>	class process signal;
>	class packet { recv send };
>	class dir search;
>	class file { read getattr };
>	class sock_file write;
>	class netlink_route_socket { write getattr read bind create nlmsg_read };
>	class unix_dgram_socket { write create connect sendto };
>	class udp_socket { write getattr read bind create node_bind };
>	class association recvfrom;
>}
>require {
>	type unlabeled_t;
>	type net_conf_t;
>	type httpd_prewikka_script_t;
>	type syslogd_t;
>	type user_home_t;
>	type audisp_t;
>	type inaddr_any_node_t;
>	type devlog_t;
>	type prelude_audisp_t;
>	type httpd_t;
>	class process signal;
>	class packet { recv send };
>	class dir search;
>	class file { read getattr };
>	class sock_file write;
>	class netlink_route_socket { write getattr read bind create nlmsg_read };
>	class unix_dgram_socket { write create connect sendto };
>	class udp_socket { write getattr read bind create node_bind };
>	class association recvfrom;
>}
>
>#============= audisp_t ==============
>allow audisp_t prelude_audisp_t:process signal;
>
>#============= httpd_prewikka_script_t ==============
>allow httpd_prewikka_script_t devlog_t:sock_file write;
>allow httpd_prewikka_script_t inaddr_any_node_t:udp_socket node_bind;
>allow httpd_prewikka_script_t net_conf_t:file { read getattr };
>allow httpd_prewikka_script_t self:netlink_route_socket { write getattr read bind create nlmsg_read };
>allow httpd_prewikka_script_t self:udp_socket { write bind create read getattr };
>allow httpd_prewikka_script_t self:unix_dgram_socket { write create connect };
>allow httpd_prewikka_script_t syslogd_t:unix_dgram_socket sendto;
>allow httpd_prewikka_script_t unlabeled_t:association recvfrom;
>allow httpd_prewikka_script_t unlabeled_t:packet { recv send };
>
>#============= httpd_t ==============
>allow httpd_t user_home_t:dir search;

Actions: View

Attachments on bug 454167: 311083 | 311084 | 311088 | 311089