Attachment 668604 Details for Bug 887674 – selinux policy for ipsec/l2tp

selinux policy for ipsec/l2tp

nm-l2tp.te (text/plain), 1.33 KB, created by Carl Byington on 2012-12-24 21:21:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Carl Byington

Created: 2012-12-24 21:21:36 UTC

Size: 1.33 KB

patch

obsolete

>
>module nm-l2tp 1.0;
>
>require {
>	type var_run_t;
>	type NetworkManager_var_run_t;
>	type ipsec_mgmt_t;
>	type l2tp_port_t;
>	type pppd_t;
>	type NetworkManager_t;
>	type l2tpd_exec_t;
>	type ipsec_key_file_t;
>	class file { rename execute getattr read open ioctl execute_no_trans };
>	class socket { create connect read write getattr getopt ioctl };
>	class fifo_file { read create unlink open };
>	class udp_socket name_bind;
>	class process { siginh noatsecure rlimitinh };
>	class dir search;
>}
>
>#============= NetworkManager_t ==============
>allow NetworkManager_t ipsec_key_file_t:file rename;
>allow NetworkManager_t l2tp_port_t:udp_socket name_bind;
>allow NetworkManager_t l2tpd_exec_t:file { read execute open execute_no_trans };
>allow NetworkManager_t self:socket { create connect };
>allow NetworkManager_t var_run_t:fifo_file { read create unlink open };
>allow NetworkManager_t ipsec_mgmt_t:process { siginh rlimitinh noatsecure };
>allow NetworkManager_t pppd_t:process { siginh rlimitinh noatsecure };
>
>#============= ipsec_mgmt_t ==============
>allow ipsec_mgmt_t NetworkManager_var_run_t:file { getattr ioctl open read };
>allow ipsec_mgmt_t NetworkManager_var_run_t:dir search;
>
>#============= pppd_t ==============
>allow pppd_t NetworkManager_var_run_t:file { getattr ioctl open read };
>allow pppd_t NetworkManager_t:socket { getattr getopt ioctl read write };

Actions: View

Attachments on bug 887674: 668604 | 717465 | 717466 | 793782 | 972147 | 1156937