diff options
Diffstat (limited to 'policy/modules/contrib/firewalld.if')
| -rw-r--r-- | policy/modules/contrib/firewalld.if | 64 |
1 files changed, 0 insertions, 64 deletions
diff --git a/policy/modules/contrib/firewalld.if b/policy/modules/contrib/firewalld.if deleted file mode 100644 index 5cf6ac6aa..000000000 --- a/policy/modules/contrib/firewalld.if +++ /dev/null @@ -1,64 +0,0 @@ -## <summary>Service daemon with a D-BUS interface that provides a dynamic managed firewall.</summary> - -######################################## -## <summary> -## Send and receive messages from -## firewalld over dbus. -## </summary> -## <param name="domain"> -## <summary> -## Domain allowed access. -## </summary> -## </param> -# -interface(`firewalld_dbus_chat',` - gen_require(` - type firewalld_t; - class dbus send_msg; - ') - - allow $1 firewalld_t:dbus send_msg; - allow firewalld_t $1:dbus send_msg; -') - -######################################## -## <summary> -## All of the rules required to -## administrate an firewalld environment. -## </summary> -## <param name="domain"> -## <summary> -## Domain allowed access. -## </summary> -## </param> -## <param name="role"> -## <summary> -## Role allowed access. -## </summary> -## </param> -## <rolecap/> -# -interface(`firewalld_admin',` - gen_require(` - type firewalld_t, firewalld_initrc_exec_t; - type firewall_etc_rw_t, firewalld_var_run_t; - type firewalld_var_log_t; - ') - - allow $1 firewalld_t:process { ptrace signal_perms }; - ps_process_pattern($1, firewalld_t) - - init_labeled_script_domtrans($1, firewalld_initrc_exec_t) - domain_system_change_exemption($1) - role_transition $2 firewalld_initrc_exec_t system_r; - allow $2 system_r; - - files_search_pids($1) - admin_pattern($1, firewalld_var_run_t) - - logging_search_logs($1) - admin_pattern($1, firewalld_var_log_t) - - files_search_etc($1) - admin_pattern($1, firewall_etc_rw_t) -') |