diff options
Diffstat (limited to 'policy/modules/contrib/portreserve.te')
| -rw-r--r-- | policy/modules/contrib/portreserve.te | 61 |
1 files changed, 0 insertions, 61 deletions
diff --git a/policy/modules/contrib/portreserve.te b/policy/modules/contrib/portreserve.te deleted file mode 100644 index a38b57a2f..000000000 --- a/policy/modules/contrib/portreserve.te +++ /dev/null @@ -1,61 +0,0 @@ -policy_module(portreserve, 1.3.1) - -######################################## -# -# Declarations -# - -type portreserve_t; -type portreserve_exec_t; -init_daemon_domain(portreserve_t, portreserve_exec_t) - -type portreserve_initrc_exec_t; -init_script_file(portreserve_initrc_exec_t) - -type portreserve_etc_t; -files_config_file(portreserve_etc_t) - -type portreserve_var_run_t; -files_pid_file(portreserve_var_run_t) - -######################################## -# -# Local policy -# - -allow portreserve_t self:capability { dac_read_search dac_override }; -allow portreserve_t self:fifo_file rw_fifo_file_perms; -allow portreserve_t self:unix_stream_socket create_stream_socket_perms; -allow portreserve_t self:unix_dgram_socket { create_socket_perms sendto }; -allow portreserve_t self:tcp_socket create_socket_perms; -allow portreserve_t self:udp_socket create_socket_perms; - -allow portreserve_t portreserve_etc_t:dir list_dir_perms; -allow portreserve_t portreserve_etc_t:file read_file_perms; -allow portreserve_t portreserve_etc_t:lnk_file read_lnk_file_perms; - -manage_dirs_pattern(portreserve_t, portreserve_var_run_t, portreserve_var_run_t) -manage_files_pattern(portreserve_t, portreserve_var_run_t, portreserve_var_run_t) -manage_sock_files_pattern(portreserve_t, portreserve_var_run_t, portreserve_var_run_t) -files_pid_filetrans(portreserve_t, portreserve_var_run_t, { file sock_file dir }) - -corecmd_getattr_bin_files(portreserve_t) - -corenet_all_recvfrom_unlabeled(portreserve_t) -corenet_all_recvfrom_netlabel(portreserve_t) -corenet_tcp_sendrecv_generic_if(portreserve_t) -corenet_udp_sendrecv_generic_if(portreserve_t) -corenet_tcp_sendrecv_generic_node(portreserve_t) -corenet_udp_sendrecv_generic_node(portreserve_t) -corenet_tcp_sendrecv_all_ports(portreserve_t) -corenet_udp_sendrecv_all_ports(portreserve_t) -corenet_tcp_bind_generic_node(portreserve_t) -corenet_udp_bind_generic_node(portreserve_t) - -corenet_sendrecv_all_server_packets(portreserve_t) -corenet_tcp_bind_all_ports(portreserve_t) -corenet_udp_bind_all_ports(portreserve_t) - -files_read_etc_files(portreserve_t) - -userdom_dontaudit_search_user_home_content(portreserve_t) |