Line | |
---|
1 | # Joe Presbrey |
---|
2 | # presbrey@mit.edu |
---|
3 | # 2006/1/15 |
---|
4 | |
---|
5 | policy_module(zephyr,1.0.0) |
---|
6 | |
---|
7 | ######################################## |
---|
8 | # |
---|
9 | # Declarations |
---|
10 | # |
---|
11 | |
---|
12 | type zephyr_t; |
---|
13 | type zephyr_bin_t; |
---|
14 | type zephyr_exec_t; |
---|
15 | domain_type(zephyr_t) |
---|
16 | corecmd_executable_file(zephyr_bin_t) |
---|
17 | init_daemon_domain(zephyr_t, zephyr_exec_t) |
---|
18 | |
---|
19 | ######################################## |
---|
20 | # |
---|
21 | # zephyr local policy |
---|
22 | |
---|
23 | files_read_etc_files(zephyr_t) |
---|
24 | files_rw_etc_runtime_files(zephyr_t) |
---|
25 | libs_use_ld_so(zephyr_t) |
---|
26 | libs_use_shared_libs(zephyr_t) |
---|
27 | miscfiles_read_localization(zephyr_t) |
---|
28 | |
---|
29 | init_use_fds(zephyr_t) |
---|
30 | init_use_script_ptys(zephyr_t) |
---|
31 | domain_use_interactive_fds(zephyr_t) |
---|
32 | term_use_console(zephyr_t) |
---|
33 | corenet_udp_bind_generic_port(zephyr_t) |
---|
34 | dev_read_urand(zephyr_t) |
---|
35 | sysnet_dns_name_resolve(zephyr_t) |
---|
36 | corenet_tcp_sendrecv_all_nodes(zephyr_t) |
---|
37 | corenet_udp_sendrecv_all_nodes(zephyr_t) |
---|
38 | corenet_tcp_sendrecv_all_ports(zephyr_t) |
---|
39 | corenet_udp_sendrecv_all_ports(zephyr_t) |
---|
40 | kerberos_use(zephyr_t) |
---|
41 | |
---|
42 | allow zephyr_t self:process setsched; |
---|
43 | allow zephyr_t self:capability { sys_admin sys_nice sys_tty_config }; |
---|
Note: See
TracBrowser
for help on using the repository browser.