|
Last change
on this file since 1476 was
91,
checked in by presbrey, 18 years ago
|
|
Zephyr strict SELinux module
|
|
File size:
1.0 KB
|
| Line | |
|---|
| 1 | # Joe Presbrey |
|---|
| 2 | # presbrey@mit.edu |
|---|
| 3 | # 2006/1/15 |
|---|
| 4 | |
|---|
| 5 | policy_module(zephyr,1.0.0) |
|---|
| 6 | |
|---|
| 7 | ######################################## |
|---|
| 8 | # |
|---|
| 9 | # Declarations |
|---|
| 10 | # |
|---|
| 11 | |
|---|
| 12 | type zephyr_t; |
|---|
| 13 | type zephyr_bin_t; |
|---|
| 14 | type zephyr_exec_t; |
|---|
| 15 | domain_type(zephyr_t) |
|---|
| 16 | corecmd_executable_file(zephyr_bin_t) |
|---|
| 17 | init_daemon_domain(zephyr_t, zephyr_exec_t) |
|---|
| 18 | |
|---|
| 19 | ######################################## |
|---|
| 20 | # |
|---|
| 21 | # zephyr local policy |
|---|
| 22 | |
|---|
| 23 | files_read_etc_files(zephyr_t) |
|---|
| 24 | files_rw_etc_runtime_files(zephyr_t) |
|---|
| 25 | libs_use_ld_so(zephyr_t) |
|---|
| 26 | libs_use_shared_libs(zephyr_t) |
|---|
| 27 | miscfiles_read_localization(zephyr_t) |
|---|
| 28 | |
|---|
| 29 | init_use_fds(zephyr_t) |
|---|
| 30 | init_use_script_ptys(zephyr_t) |
|---|
| 31 | domain_use_interactive_fds(zephyr_t) |
|---|
| 32 | term_use_console(zephyr_t) |
|---|
| 33 | corenet_udp_bind_generic_port(zephyr_t) |
|---|
| 34 | dev_read_urand(zephyr_t) |
|---|
| 35 | sysnet_dns_name_resolve(zephyr_t) |
|---|
| 36 | corenet_tcp_sendrecv_all_nodes(zephyr_t) |
|---|
| 37 | corenet_udp_sendrecv_all_nodes(zephyr_t) |
|---|
| 38 | corenet_tcp_sendrecv_all_ports(zephyr_t) |
|---|
| 39 | corenet_udp_sendrecv_all_ports(zephyr_t) |
|---|
| 40 | kerberos_use(zephyr_t) |
|---|
| 41 | |
|---|
| 42 | allow zephyr_t self:process setsched; |
|---|
| 43 | allow zephyr_t self:capability { sys_admin sys_nice sys_tty_config }; |
|---|
Note: See
TracBrowser
for help on using the repository browser.
