diff options
| author |   Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-04-21 20:07:46 +0200 |
|---|---|---|
| committer | Sven Vermeulen <sven.vermeulen@siphos.be> | 2012-04-21 20:07:46 +0200 |
| commit | 3962a6834f4e7ef04441de4f3134ff329d8602f9 (patch) | |
| tree | cae07463edd5b609a97513e00d63e1bd410cc8bb /policy/modules/system/setrans.if | |
| parent | Initial commit (diff) | |
| download | hardened-refpolicy-3962a6834f4e7ef04441de4f3134ff329d8602f9.tar.gz hardened-refpolicy-3962a6834f4e7ef04441de4f3134ff329d8602f9.tar.bz2 hardened-refpolicy-3962a6834f4e7ef04441de4f3134ff329d8602f9.zip | |
Pushing 2.20120215 (current version)
Diffstat (limited to 'policy/modules/system/setrans.if')
| -rw-r--r-- | policy/modules/system/setrans.if | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/policy/modules/system/setrans.if b/policy/modules/system/setrans.if new file mode 100644 index 00000000..efa9c27f --- /dev/null +++ b/policy/modules/system/setrans.if @@ -0,0 +1,42 @@ +## <summary>SELinux MLS/MCS label translation service.</summary> + +######################################## +## <summary> +## Execute setrans server in the setrans domain. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed to transition. +## </summary> +## </param> +# +# +interface(`setrans_initrc_domtrans',` + gen_require(` + type setrans_initrc_exec_t; + ') + + init_labeled_script_domtrans($1, setrans_initrc_exec_t) +') + +####################################### +## <summary> +## Allow a domain to translate contexts. +## </summary> +## <param name="domain"> +## <summary> +## Domain allowed access. +## </summary> +## </param> +# +interface(`setrans_translate_context',` + gen_require(` + type setrans_t, setrans_var_run_t; + class context translate; + ') + + allow $1 self:unix_stream_socket create_stream_socket_perms; + allow $1 setrans_t:context translate; + stream_connect_pattern($1, setrans_var_run_t, setrans_var_run_t, setrans_t) + files_list_pids($1) +') |