Last change
on this file since 88 was
84,
checked in by presbrey, 18 years ago
|
preliminary zephyr support
|
File size:
933 bytes
|
Rev | Line | |
---|
[84] | 1 | policy_module(zephyr,1.0.0) |
---|
| 2 | |
---|
| 3 | ######################################## |
---|
| 4 | # |
---|
| 5 | # Declarations |
---|
| 6 | # |
---|
| 7 | |
---|
| 8 | type zephyr_t; |
---|
| 9 | type zephyr_bin_t; |
---|
| 10 | type zephyr_exec_t; |
---|
| 11 | domain_type(zephyr_t) |
---|
| 12 | init_daemon_domain(zephyr_t, zephyr_exec_t) |
---|
| 13 | |
---|
| 14 | ######################################## |
---|
| 15 | # |
---|
| 16 | # AFS local policy |
---|
| 17 | |
---|
| 18 | files_read_etc_files(zephyr_t) |
---|
| 19 | files_rw_etc_runtime_files(zephyr_t) |
---|
| 20 | libs_use_ld_so(zephyr_t) |
---|
| 21 | libs_use_shared_libs(zephyr_t) |
---|
| 22 | miscfiles_read_localization(zephyr_t) |
---|
| 23 | |
---|
| 24 | # Init script handling |
---|
| 25 | init_use_fds(zephyr_t) |
---|
| 26 | init_use_script_ptys(zephyr_t) |
---|
| 27 | domain_use_interactive_fds(zephyr_t) |
---|
| 28 | term_use_console(zephyr_t) |
---|
| 29 | |
---|
| 30 | allow zephyr_t self:process setsched; |
---|
| 31 | allow zephyr_t self:capability { sys_admin sys_nice sys_tty_config}; |
---|
| 32 | |
---|
| 33 | sysnet_dns_name_resolve(zephyr_t) |
---|
| 34 | corenet_tcp_sendrecv_all_nodes(zephyr_t) |
---|
| 35 | corenet_udp_sendrecv_all_nodes(zephyr_t) |
---|
| 36 | corenet_tcp_sendrecv_all_ports(zephyr_t) |
---|
| 37 | corenet_udp_sendrecv_all_ports(zephyr_t) |
---|
| 38 | |
---|
| 39 | #allow zephyr_bin_t fs_t:filesystem associate; |
---|
Note: See
TracBrowser
for help on using the repository browser.