Last change
on this file since 87 was
84,
checked in by presbrey, 18 years ago
|
preliminary zephyr support
|
File size:
933 bytes
|
Line | |
---|
1 | policy_module(zephyr,1.0.0) |
---|
2 | |
---|
3 | ######################################## |
---|
4 | # |
---|
5 | # Declarations |
---|
6 | # |
---|
7 | |
---|
8 | type zephyr_t; |
---|
9 | type zephyr_bin_t; |
---|
10 | type zephyr_exec_t; |
---|
11 | domain_type(zephyr_t) |
---|
12 | init_daemon_domain(zephyr_t, zephyr_exec_t) |
---|
13 | |
---|
14 | ######################################## |
---|
15 | # |
---|
16 | # AFS local policy |
---|
17 | |
---|
18 | files_read_etc_files(zephyr_t) |
---|
19 | files_rw_etc_runtime_files(zephyr_t) |
---|
20 | libs_use_ld_so(zephyr_t) |
---|
21 | libs_use_shared_libs(zephyr_t) |
---|
22 | miscfiles_read_localization(zephyr_t) |
---|
23 | |
---|
24 | # Init script handling |
---|
25 | init_use_fds(zephyr_t) |
---|
26 | init_use_script_ptys(zephyr_t) |
---|
27 | domain_use_interactive_fds(zephyr_t) |
---|
28 | term_use_console(zephyr_t) |
---|
29 | |
---|
30 | allow zephyr_t self:process setsched; |
---|
31 | allow zephyr_t self:capability { sys_admin sys_nice sys_tty_config}; |
---|
32 | |
---|
33 | sysnet_dns_name_resolve(zephyr_t) |
---|
34 | corenet_tcp_sendrecv_all_nodes(zephyr_t) |
---|
35 | corenet_udp_sendrecv_all_nodes(zephyr_t) |
---|
36 | corenet_tcp_sendrecv_all_ports(zephyr_t) |
---|
37 | corenet_udp_sendrecv_all_ports(zephyr_t) |
---|
38 | |
---|
39 | #allow zephyr_bin_t fs_t:filesystem associate; |
---|
Note: See
TracBrowser
for help on using the repository browser.