40 lines
781 B
Plaintext
40 lines
781 B
Plaintext
|
## <summary>Authoritative only name server</summary>
|
||
|
|
|
||
|
|
########################################
|
||
|
|
## <summary>
|
||
|
|
## Send and receive datagrams from NSD.
|
||
|
|
## </summary>
|
||
|
|
## <param name="domain">
|
||
|
|
## <summary>
|
||
|
|
## Domain allowed access.
|
||
|
|
## </summary>
|
||
|
|
## </param>
|
||
|
|
#
|
||
|
|
interface(`nsd_udp_chat',`
|
||
|
|
gen_require(`
|
||
|
|
type nsd_t;
|
||
|
|
')
|
||
|
|
allow $1 nsd_t:udp_socket sendto;
|
||
|
|
allow nsd_t $1:udp_socket recvfrom;
|
||
|
|
')
|
||
|
|
|
||
|
|
########################################
|
||
|
|
## <summary>
|
||
|
|
## Connect to NSD over a TCP socket
|
||
|
|
## </summary>
|
||
|
|
## <param name="domain">
|
||
|
|
## <summary>
|
||
|
|
## Domain allowed access.
|
||
|
|
## </summary>
|
||
|
|
## </param>
|
||
|
|
#
|
||
|
|
interface(`nsd_tcp_connect',`
|
||
|
|
gen_require(`
|
||
|
|
type nsd_t;
|
||
|
|
')
|
||
|
|
|
||
|
|
allow $1 nsd_t:tcp_socket { connectto recvfrom };
|
||
|
|
allow nsd_t $1:tcp_socket { acceptfrom recvfrom };
|
||
|
|
kernel_tcp_recvfrom($1)
|
||
|
|
')
|