type_enforcement

publicfile.te (text/plain), 924 bytes, created by petre rodan (RETIRED) on 2003-11-28 23:31:41 UTC

# $Id: publicfile.te,v 1.1 2003/11/28 15:17:48 peter Exp $
#
# author Petre Rodan <[e-mail]>
#
# get the latest version of this file from
# http://team.rav.ro/peter/policy.tar.gz
#

daemon_domain(publicfile)
type publicfile_content_t, file_type, sysadmfile;
domain_auto_trans(initrc_t, publicfile_exec_t, publicfile_t)

ifdef(`ucspi-tcp.te', `
domain_auto_trans( utcpserver_t,  publicfile_exec_t, publicfile_t)
allow publicfile_t utcpserver_t:tcp_socket { read write };
')

ifdef(`svc.te', `
allow publicfile_t svc_t:fd { use };
allow publicfile_t svc_t:fifo_file { write };
')

allow publicfile_t initrc_t:tcp_socket { read write };
allow publicfile_t publicfile_content_t:file { getattr read };
allow publicfile_t publicfile_content_t:dir { search getattr read };
allow publicfile_t publicfile_content_t:lnk_file { read };
allow publicfile_t self:capability { dac_override setgid setuid sys_chroot };