selinux-refpolicy/policy/modules/system/netlabel.te

30 lines
722 B
Plaintext
Raw Normal View History

policy_module(netlabel, 1.3.1)
########################################
#
# Declarations
#
type netlabel_mgmt_t;
type netlabel_mgmt_exec_t;
2009-06-26 14:40:13 +00:00
application_domain(netlabel_mgmt_t, netlabel_mgmt_exec_t)
role system_r types netlabel_mgmt_t;
########################################
#
# NetLabel Management Tools Local policy
#
# modify the network subsystem configuration
allow netlabel_mgmt_t self:capability net_admin;
allow netlabel_mgmt_t self:netlink_socket create_socket_perms;
allow netlabel_mgmt_t self:netlink_generic_socket create_socket_perms;
kernel_read_network_state(netlabel_mgmt_t)
2007-09-04 18:57:58 +00:00
files_read_etc_files(netlabel_mgmt_t)
seutil_use_newrole_fds(netlabel_mgmt_t)
2008-11-05 16:10:46 +00:00
userdom_use_user_terminals(netlabel_mgmt_t)