## Service for handling smart card readers. ######################################## ## ## Send null signals to openct. ## ## ## ## Domain allowed access. ## ## # interface(`openct_signull',` gen_require(` type openct_t; ') allow $1 openct_t:process signull; ') ######################################## ## ## Execute openct in the caller domain. ## ## ## ## Domain allowed access. ## ## # interface(`openct_exec',` gen_require(` type openct_t, openct_exec_t; ') corecmd_search_bin($1) can_exec($1, openct_exec_t) ') ######################################## ## ## Execute a domain transition to run openct. ## ## ## ## Domain allowed to transition. ## ## # interface(`openct_domtrans',` gen_require(` type openct_t, openct_exec_t; ') corecmd_search_bin($1) domtrans_pattern($1, openct_exec_t, openct_t) ') ######################################## ## ## Read openct pid files. ## ## ## ## Domain allowed access. ## ## # interface(`openct_read_pid_files',` gen_require(` type openct_var_run_t; ') files_search_pids($1) read_files_pattern($1, openct_var_run_t, openct_var_run_t) ') ######################################## ## ## Connect to openct over an unix ## domain stream socket. ## ## ## ## Domain allowed access. ## ## # interface(`openct_stream_connect',` gen_require(` type openct_t, openct_var_run_t; ') files_search_pids($1) stream_connect_pattern($1, openct_var_run_t, openct_var_run_t, openct_t) ') ######################################## ## ## All of the rules required to ## administrate an openct environment. ## ## ## ## Domain allowed access. ## ## ## ## ## Role allowed access. ## ## ## # interface(`openct_admin',` gen_require(` type openct_t, openct_initrc_exec_t, openct_var_run_t; ') allow $1 openct_t:process { ptrace signal_perms }; ps_process_pattern($1, openct_t) init_startstop_service($1, $2, openct_t, openct_initrc_exec_t) files_search_pids($1) admin_pattern($1, openct_var_run_t) ')