RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
selinux-refpolicy/policy/modules/services/icecast.te

62 lines
1.5 KiB
Plaintext
Raw Normal View History

Module version bump for c17ad38 5271920 2a2b6a7 01c4413 c4fbfae a831710 67effb0 483be01 c6c63f6 b0d8d59 5b082e4 b8097d6 689d954 5afc3d3 f3c5e77 a59e50c cf87233 17759c7 dc1db54 e9bf16d 4f95198 bf40792 622c63b c20842c dc7cc4d 792d448
2010-09-15 14:42:34 +00:00
policy_module(icecast, 1.0.1)
icecast policy from Dan Walsh Fixed some style and spacing issues Replace manage_var_run interface with manage_pid_files with fewer permissions Replaced rkit_daemon_system_domain with rtkit_schedule
2010-03-19 19:46:59 +00:00
########################################
#
# Declarations
#
type icecast_t;
type icecast_exec_t;
init_daemon_domain(icecast_t, icecast_exec_t)
type icecast_initrc_exec_t;
init_script_file(icecast_initrc_exec_t)
type icecast_var_run_t;
files_pid_file(icecast_var_run_t)
type icecast_log_t;
logging_log_file(icecast_log_t)
########################################
#
# icecast local policy
#
allow icecast_t self:capability { dac_override setgid setuid sys_nice };
allow icecast_t self:process { getsched fork setsched signal };
allow icecast_t self:fifo_file rw_fifo_file_perms;
allow icecast_t self:unix_stream_socket create_stream_socket_perms;
allow icecast_t self:tcp_socket create_stream_socket_perms;
Minor tweaks on icecast.
2010-03-22 12:56:32 +00:00
manage_dirs_pattern(icecast_t, icecast_log_t, icecast_log_t)
manage_files_pattern(icecast_t, icecast_log_t, icecast_log_t)
icecast policy from Dan Walsh Fixed some style and spacing issues Replace manage_var_run interface with manage_pid_files with fewer permissions Replaced rkit_daemon_system_domain with rtkit_schedule
2010-03-19 19:46:59 +00:00
logging_log_filetrans(icecast_t, icecast_log_t, { file dir } )
Minor tweaks on icecast.
2010-03-22 12:56:32 +00:00
manage_dirs_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)
manage_files_pattern(icecast_t, icecast_var_run_t, icecast_var_run_t)
icecast policy from Dan Walsh Fixed some style and spacing issues Replace manage_var_run interface with manage_pid_files with fewer permissions Replaced rkit_daemon_system_domain with rtkit_schedule
2010-03-19 19:46:59 +00:00
files_pid_filetrans(icecast_t, icecast_var_run_t, { file dir })
icecast patch from Dan Walsh
2010-08-30 15:32:58 +00:00
kernel_read_system_state(icecast_t)
icecast policy from Dan Walsh Fixed some style and spacing issues Replace manage_var_run interface with manage_pid_files with fewer permissions Replaced rkit_daemon_system_domain with rtkit_schedule
2010-03-19 19:46:59 +00:00
corenet_tcp_bind_soundd_port(icecast_t)
# Init script handling
domain_use_interactive_fds(icecast_t)
files_read_etc_files(icecast_t)
auth_use_nsswitch(icecast_t)
miscfiles_read_localization(icecast_t)
sysnet_dns_name_resolve(icecast_t)
icecast patch from Dan Walsh
2010-08-30 15:32:58 +00:00
optional_policy(`
apache_read_sys_content(icecast_t)
')
icecast policy from Dan Walsh Fixed some style and spacing issues Replace manage_var_run interface with manage_pid_files with fewer permissions Replaced rkit_daemon_system_domain with rtkit_schedule
2010-03-19 19:46:59 +00:00
optional_policy(`
Rename rtkit_schedule() to rtkit_scheduled().
2010-03-22 13:54:58 +00:00
rtkit_scheduled(icecast_t)
icecast policy from Dan Walsh Fixed some style and spacing issues Replace manage_var_run interface with manage_pid_files with fewer permissions Replaced rkit_daemon_system_domain with rtkit_schedule
2010-03-19 19:46:59 +00:00
')