blob: e9cf8a4956ba3203bbaaa56b1bfbef37281a6b55 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
policy_module(pingd, 1.0.0)
########################################
#
# Declarations
#
type pingd_t;
type pingd_exec_t;
init_daemon_domain(pingd_t, pingd_exec_t)
# type for config
type pingd_etc_t;
files_type(pingd_etc_t)
type pingd_initrc_exec_t;
init_script_file(pingd_initrc_exec_t)
# type for pingd modules
type pingd_modules_t;
files_type(pingd_modules_t)
########################################
#
# pingd local policy
#
allow pingd_t self:capability net_raw;
allow pingd_t self:tcp_socket create_stream_socket_perms;
allow pingd_t self:rawip_socket { write read create bind };
read_files_pattern(pingd_t, pingd_etc_t, pingd_etc_t)
read_files_pattern(pingd_t, pingd_modules_t, pingd_modules_t)
mmap_files_pattern(pingd_t, pingd_modules_t, pingd_modules_t)
corenet_raw_bind_generic_node(pingd_t)
corenet_tcp_bind_generic_node(pingd_t)
corenet_tcp_bind_pingd_port(pingd_t)
auth_use_nsswitch(pingd_t)
files_search_usr(pingd_t)
logging_send_syslog_msg(pingd_t)
miscfiles_read_localization(pingd_t)
|
GitWeb
