| Last change
                  on this file since 85 was
                  84,
                  checked in by presbrey, 19 years ago | 
        
          | preliminary zephyr support | 
        | File size:
            933 bytes | 
      
      
        
  | Rev | Line |  | 
|---|
| [84] | 1 | policy_module(zephyr,1.0.0) | 
|---|
|  | 2 |  | 
|---|
|  | 3 | ######################################## | 
|---|
|  | 4 | # | 
|---|
|  | 5 | # Declarations | 
|---|
|  | 6 | # | 
|---|
|  | 7 |  | 
|---|
|  | 8 | type zephyr_t; | 
|---|
|  | 9 | type zephyr_bin_t; | 
|---|
|  | 10 | type zephyr_exec_t; | 
|---|
|  | 11 | domain_type(zephyr_t) | 
|---|
|  | 12 | init_daemon_domain(zephyr_t, zephyr_exec_t) | 
|---|
|  | 13 |  | 
|---|
|  | 14 | ######################################## | 
|---|
|  | 15 | # | 
|---|
|  | 16 | # AFS local policy | 
|---|
|  | 17 |  | 
|---|
|  | 18 | files_read_etc_files(zephyr_t) | 
|---|
|  | 19 | files_rw_etc_runtime_files(zephyr_t) | 
|---|
|  | 20 | libs_use_ld_so(zephyr_t) | 
|---|
|  | 21 | libs_use_shared_libs(zephyr_t) | 
|---|
|  | 22 | miscfiles_read_localization(zephyr_t) | 
|---|
|  | 23 |  | 
|---|
|  | 24 | # Init script handling | 
|---|
|  | 25 | init_use_fds(zephyr_t) | 
|---|
|  | 26 | init_use_script_ptys(zephyr_t) | 
|---|
|  | 27 | domain_use_interactive_fds(zephyr_t) | 
|---|
|  | 28 | term_use_console(zephyr_t) | 
|---|
|  | 29 |  | 
|---|
|  | 30 | allow zephyr_t self:process setsched; | 
|---|
|  | 31 | allow zephyr_t self:capability { sys_admin sys_nice sys_tty_config}; | 
|---|
|  | 32 |  | 
|---|
|  | 33 | sysnet_dns_name_resolve(zephyr_t) | 
|---|
|  | 34 | corenet_tcp_sendrecv_all_nodes(zephyr_t) | 
|---|
|  | 35 | corenet_udp_sendrecv_all_nodes(zephyr_t) | 
|---|
|  | 36 | corenet_tcp_sendrecv_all_ports(zephyr_t) | 
|---|
|  | 37 | corenet_udp_sendrecv_all_ports(zephyr_t) | 
|---|
|  | 38 |  | 
|---|
|  | 39 | #allow zephyr_bin_t fs_t:filesystem associate; | 
|---|
       
      
      Note: See 
TracBrowser
        for help on using the repository browser.